CVE-2022-21806

A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network.

• CWE-368
• CWE-416

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1440Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1440Exploit, Third Party Advisory

Published

Jun 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-21800MMP: All versions prior to v1.0.3, PTP C-series: Device vers…6.5
• CVE-2022-21801A denial of service vulnerability exists in the netserver re…7.5
• CVE-2022-21802The package grapesjs before 0.19.5 are vulnerable to Cross-s…6.1
• CVE-2022-21803This affects the package nconf before 0.11.4. When using the…7.5
• CVE-2022-21804Out-of-bounds write in software for the Intel QAT Driver for…7.8
• CVE-2022-21805Reflected cross-site scripting vulnerability in the attached…6.1
• CVE-2022-21807Uncontrolled search path elements in the Intel(R) VTune(TM) …7.8
• CVE-2022-21808Path traversal vulnerability exists in CAMS for HIS Server c…8.8
• CVE-2022-21809A file write vulnerability exists in the httpd upload.cgi fu…8.1
• CVE-2022-2181The Advanced WordPress Reset WordPress plugin before 1.6 doe…6.1
• CVE-2022-21810All versions of the package smartctl are vulnerable to Comma…7.8
• CVE-2022-21812Improper access control in the Intel(R) HAXM software before…7.8