CVE-2026-2686

🗓️ 19 Feb 2026 00:02:07Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 9 Views🌐 WEB

Remote OS command injection in SECCN Dingcheng G10 3.1.0.181203 via User in session_login.cgi.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-2686	19 Feb 202600:19	–	circl
CNNVD	SECCN Dingcheng G10 操作系统命令注入漏洞	19 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-2686 SECCN Dingcheng G10 session_login.cgi qq os command injection	19 Feb 202600:02	–	cvelist
NVD	CVE-2026-2686	19 Feb 202600:16	–	nvd
Positive Technologies	PT-2026-20559	19 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-2686	20 Feb 202601:22	–	redhatcve
Vulnrichment	CVE-2026-2686 SECCN Dingcheng G10 session_login.cgi qq os command injection	19 Feb 202600:02	–	vulnrichment

Vulners

Node

seccn_dingcheng g10Match3.1.0.181203

[
  {
    "vendor": "SECCN Dingcheng",
    "product": "G10",
    "versions": [
      {
        "version": "3.1.0.181203",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/cha0yang1/SECCN/blob/main/UnauthorizedRCE.md
vuldb	www.vuldb.com/
github	www.github.com/cha0yang1/SECCN/blob/main/UnauthorizedRCE.md

Parameter	Position	Path	Description	CWE
User	request body	/cgi-bin/session_login.cgi	OS command injection via User argument in /cgi-bin/session_login.cgi leading to remote code execution.	CWE-78, CWE-77

15 Apr 2026 00:35Current

5.4Medium risk

Vulners AI Score5.4

CVSS 49.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.00056

SSVC