Threats tagged 'ghsa-rcvc-m8x7-hg25'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-41925WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi Critical9.32026-05-04GCVE DatabaseCVE-2026-41925 The WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) has an OS command injection vulnerability in the adm.cgi binary's reboot_time function. This flaw allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the reboot_time POST parameter when reboot_enabled=1. The vulnerability enables remote code execution without requiring authentication. Report on CVE-2026-41925 Vulnerability CWE-78 #ghsa-rcvc-m8x7-hg25	GCVE Database	2026-05-04

Page 1 of 1