Threats tagged 'ghsa-8wgj-4v3p-3568'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 5.0%	CVE-2026-41922WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the Critical9.3EPSS 5.0%2026-05-04GCVE DatabaseCVE-2026-41922 The WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) has an OS command injection vulnerability in the wireless.cgi binary. This flaw allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the sz11gChannel or PIN POST parameters. The vulnerability arises from unsanitized input handling in the set_wifi_basic and set_wifi_do_wps functions, enabling remote code execution without authentication. EPSS 5.0%Report on CVE-2026-41922 Vulnerability CWE-78 #ghsa-8wgj-4v3p-3568	GCVE Database	2026-05-04

Page 1 of 1