Threats tagged 'ghsa-mwfr-mj36-qv8w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-36356The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows Critical9.12026-05-05GCVE DatabaseCVE-2026-36356 A critical unauthenticated OS command injection vulnerability exists in the GoAhead web server on MeiG Smart FORGE_SLT711 devices running firmware MDM9607.LE.1.0-00110-STD.PROD-1. The flaw is exploitable via the /action/SetRemoteAccessCfg endpoint, allowing remote attackers to execute arbitrary operating system commands without authentication. Report on CVE-2026-36356 Vulnerability CWE-78 #ghsa-mwfr-mj36-qv8w	GCVE Database	2026-05-05

Page 1 of 1