CVE ID :CVE-2026-41927 Published : May 4, 2026, 8:16 p.m. | 1 hour, 58 minutes ago Description :WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allows unauthenticated attackers to overwrite the saved return address by sending a POST request with a Content-Length header exceeding 512 bytes. Attackers can exploit insufficient length validation in the fgets() call to achieve arbitrary code execution through return-oriented programming or return-to-libc techniques. Severity: 8.3 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...