Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.
sagemcom f\\@st_3686_firmware 3.495