Security Advisory

CVE-2026-30703

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-18 00:00:00
Last updated 2026-03-23 15:56:39
Assigner mitre
State PUBLISHED

Description

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input provided to a command-related parameter in the sysCMD functionality.