CVE-2025-50635

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.

• CWE-476

• https://github.com/Chinesexilinyu/Netis-WF2780-cgitest.cgi-Vulnerability/tree/main/1Exploit, Third Party Advisory

Published

Aug 13, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-50614A buffer overflow vulnerability has been discovered in the N…7.5
• CVE-2025-50615A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-50616A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-50617A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-5062The WooCommerce plugin for WordPress is vulnerable to PostMe…6.1
• CVE-2025-5063Use after free in Compositing in Google Chrome prior to 137.…8.8
• CVE-2025-5064Inappropriate implementation in Background Fetch API in Goog…5.4
• CVE-2025-50641Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow…6.5
• CVE-2025-50644A buffer overflow vulnerability exists in D-Link DI-8003 16.…7.5
• CVE-2025-50645A vulnerability has been discovered in D-Link DI-8003 16.07.…7.5
• CVE-2025-50646A buffer overflow vulnerability exists in D-Link DI-8003 16.…7.5
• CVE-2025-50647A buffer overflow vulnerability exists in D-Link DI-8003 16.…7.5