Peplink Security Advisories

Topic	Replies	Views	Activity
Peplink Security Advisory: Linux Kernel IPv4 TCP use-after-free (UAF) Vulnerability (CVE-2026-98432) incontrol , security-advisory , fw-8_6_1 Ref.: #38251 Published: 2026-11-03 [Last updated: 2026-11-05] Details: A new vulnerability was reported a few days ago, and highlighted in this post. According to one of the articles published, “Anthropic said on Octo…	1	428	November 3, 2026
Peplink Security Advisory: PHP2Shell Vulnerability (CVE-2026-109618 and CVE-2026-109619) security-advisory , ica , fw-8_6_1 , php2shell , php Ref.: #38270 Published: 2026-10-22 [Last updated: 2026-10-28] Background Recently, we have had users highlight the php2shell vulnerability (CVE-2026-109618 and CVE-2026-109619), in this thread. Details of the PHP2Shel…	1	2682	October 26, 2026
Peplink Security Advisory: PHP Remote Code Execution Vulnerability (CVE-2026-115560) security-advisory , fw-8_6_1 , php	0	288	October 28, 2026
[Not Affected] Peplink Security Notice: Google Brotli Vulnerability (CVE-2026-111497) security-advisory , google-brotli	0	141	October 28, 2026
Peplink Security Advisory: Firmware 8.3.0 - Console Port Giving Root Acces (CVE-2023-49228) security-advisory , fw-8_3_2	0	905	December 27, 2023
Peplink Security Advisory: Firmware 8.3.0 - Command Injection (CVE-2023-49226) security-advisory , fw-8_3_2	0	1260	December 27, 2023
Peplink Security Advisory: Firmware 8.3.0 - Multiple Vulnerabilities (CVE-2023-49229, CVE-2023-49230) security-advisory , fw-8_3_2	0	1372	December 8, 2023
Peplink Security Advisory: Balance / MAX / FusionHub Firmware (up to 8.5.4) - SSH CLI Command Injection Vulnerability (CWE-78 / CWE-732) security-advisory , fw-8_6_0 , fw-8_5_5 , fw-8_3_2	0	305	August 26, 2026
Peplink Security Advisory: Balance / MAX / FusionHub Firmware 8.5.4 - Web Service components vulnerability (CVE-2026-42945) security-advisory	0	411	August 26, 2026
Peplink Security Advisory: Balance / MAX / FusionHub Firmware 8.5.4 - Web Admin vulnerability that could allow unauthenticated access to internal binaries security-advisory , fw-8_6_0 , fw-8_5_5 , fw-8_3_2	0	305	August 26, 2026
Peplink Security Advisory: Balance and MAX Routers with Built-in Wi-Fi - AirSnitch Vulnerability security-advisory , airsnitch , fw-8_6_0	0	158	August 26, 2026
Peplink Security Advisory: Balance / MAX / FusionHub Firmware (up to) 8.5.4 - SSH CLI Component with multiple Vulnerabilities security-advisory , fw-8_6_0 , fw-8_5_5	0	249	August 26, 2026
Peplink Security Advisory: Balance/MAX/FusionHub Firmware 8.5.3 - Shell Command Injection Vulnerability security-advisory , fw-8_3_2	4	10947	February 21, 2026
Peplink Security Advisory: Smart Reader Firmware 1.2.0 (CVE-2023-43491, CVE-2023-45209, CVE-2023-39367, CVE-2023-45744, CVE-2023-40146) security-advisory	2	2823	October 9, 2025
Peplink Security Advisory: Firmware 6.3.5 - OS command injection & Cross-Site Scripting (XSS) vulnerabilities security-advisory	1	728	December 5, 2023
Peplink Security Advisory: Allows files to be downloaded from Web Admin (CVE-2020-24246) security-advisory	0	602	December 4, 2023
Vulnerabilities Announcement - Bypassing Wi-Fi Encryption by Manipulating Transmit Queues security-advisory	14	1639	October 11, 2023
[Unaffected] Security Notice for Spring4Shell Vulnerability (CVE-2022-22963) security-advisory	1	200	April 1, 2022
Peplink Security Advisory: FragAttack wi-fi , security-advisory , fragattack	11	1422	February 18, 2022
[Unaffected] Security Notice for Log4j Vulnerability (CVE-2021-44228) security-advisory	0	1270	December 13, 2021
Security Advisory: Blacknurse (CVE: N/A) security-advisory	1	974	July 18, 2021
Peplink Security Advisory: CVE-2017-5753, CVE-2017-5715 (Spectre); CVE-2017-5754 (Meltdown) security-advisory	7	1792	June 23, 2021
Peplink Security Advisory: dnsmasq (CVE-2017-14491 ~ 14496, CVE-2017-13704) security-advisory	1	1945	October 10, 2017
Firmwares 7.0.1 and 6.3.4 Address Security Advisory CVE-2017-8835 ~ 8841 security-advisory	5	3208	June 12, 2017
Peplink Security Advisory: FREAK Vulnerability (CVE-2015-0204) security-advisory	2	2281	December 13, 2016
[Unaffected] Security Notice for Dirty COW. CVE-2016-5195 security-advisory	2	1485	November 18, 2016
[Unaffected] Security Notice for KCodes NetUSB Vulnerability. CVE-2015-3036 security-advisory	0	3658	May 21, 2015
[Unaffected] Security Notice for Realtek SDK Vulnerability. NVD CVE-2014-8361 security-advisory	0	2417	May 19, 2015
[Unaffected] Security Notice for multiple NTP Vulnerabilities. ICS-CERT Advisory ICSA-14-353-01A security-advisory	0	1929	January 14, 2015
Security Advisory: SSLv3 POODLE Vulnerability (CVE-2014-3566) security-advisory	0	2831	October 20, 2014

Peplink Security Advisory: Linux Kernel IPv4 TCP use-after-free (UAF) Vulnerability (CVE-2026-98432)

incontrol , security-advisory , fw-8_6_1

Ref.: #38251 Published: 2026-11-03 [Last updated: 2026-11-05] Details: A new vulnerability was reported a few days ago, and highlighted in this post. According to one of the articles published, “Anthropic said on Octo…

1

428

November 3, 2026

Peplink Security Advisory: PHP2Shell Vulnerability (CVE-2026-109618 and CVE-2026-109619)

security-advisory , ica , fw-8_6_1 , php2shell , php

Ref.: #38270 Published: 2026-10-22 [Last updated: 2026-10-28] Background Recently, we have had users highlight the php2shell vulnerability (CVE-2026-109618 and CVE-2026-109619), in this thread. Details of the PHP2Shel…

1

2682

October 26, 2026

Peplink Security Advisory: PHP Remote Code Execution Vulnerability (CVE-2026-115560)

security-advisory , fw-8_6_1 , php

0

288

October 28, 2026

[Not Affected] Peplink Security Notice: Google Brotli Vulnerability (CVE-2026-111497)

security-advisory , google-brotli

0

141