CVE-2020-9419: Arcadyan VRV9506JAC23 Firmware

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domain_name parameters present in the LAN configuration section of the administrative dashboard.

Affected products

• Arcadyan VRV9506JAC23 Firmware: affected versions not specified

Published 2022-12-14. Last modified 2026-06-17.