Apache mod_cgid out-of-bounds write (CVE-2021-39275)

Summary

An out-of-bounds write in mod_cgid could allow remote code execution.

Vulnerability ID	Vulnerability Overview
CVE-2021-39275	ap_escape_quotes() in Apache may write outside the bounds of a buffer when mod_cgid processes maliciously crafted input, leading to a crash or code execution.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices