Beveiligingsadvies

CVE-2026-36828

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-19 00:00:00

Laatst bijgewerkt 2026-05-19 17:48:13

Toegewezen door mitre

CVSS-score 8.8

Status PUBLISHED

Beschrijving

A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7. The CGI component allows authenticated users to execute arbitrary shell commands with root privileges via the action=runcmd parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗