Beveiligingsadvies

CVE-2026-58146

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-16 11:21:15

Laatst bijgewerkt 2026-09-16 15:58:50

Toegewezen door CERT-PL

CVSS-score 9.4

Status PUBLISHED

Beschrijving

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_cookie POST parameter. The cli_cookie parameter value is directly concatenated into a find command string without proper sanitization. This allows a remote, unauthenticated attacker to inject and execute arbitrary shell commands as root on the underlying operating system. This issue has been fixed in firmware version 1.1.0.651412

← Alle CVE's bekijken Bekijk op cve.org ↗