CVE-2016-10176

The record

The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.

Affected packages

Related vulnerabilities

• CVE-2026-63339 IXP Manager is a full-stack web application for managing Internet Exchange Points. CWE-20
• CVE-2026-62958 libriscv is a RISC-V sandbox and emulator. CWE-20
• CVE-2026-119342 Stirling-PDF is a locally hosted web application that facilitates various operations on… CWE-20
• CVE-2026-119339 Tesseract is an open source OCR engine. CWE-20
• CVE-2026-62335 OpenVM is a performant and modular zkVM framework built for customization and… CWE-20
• CVE-2026-62337 SNARK Verifier is a generic (S)NARK verifier. CWE-20
• CVE-2026-62333 OpenVM is a performant and modular zkVM framework built for customization and… CWE-20
• CVE-2026-61618 SNARK Verifier is a generic (S)NARK verifier. CWE-20