Threats tagged 'ghsa-fchj-4xr4-27f8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 3.2%	CVE-2026-41924WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the Critical9.3EPSS 3.2%2026-05-04GCVE DatabaseCVE-2026-41924 The WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) has an OS command injection vulnerability in the makeRequest.cgi binary. This flaw allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the set_time or StartSniffer functions. The attack bypasses input sanitization by using specially crafted ampersand-delimited parameters in a POST request, enabling command execution with a maximum length of 31 bytes. EPSS 3.2%Report on CVE-2026-41924 Vulnerability CWE-78 #ghsa-fchj-4xr4-27f8	GCVE Database	2026-05-04

Page 1 of 1