CVE-2026-82971

🗓️ 31 Aug 2026 22:15:39Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 52 Views🌐 WEB

Command injection in QVidium Opera11 3.3.2a26-Ax4x-opera11 via ipaddr in net_tr.cgi.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-82971	31 Aug 202623:10	–	circl
Cvelist	CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection	31 Aug 202622:15	–	cvelist
EUVD	EUVD-2026-68911	1 Sep 202600:31	–	euvd
NVD	CVE-2026-82971	31 Aug 202623:16	–	nvd
Positive Technologies	PT-2026-84054	31 Aug 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-82971: Improper Neutralization of Special Elements used in a Command	31 Aug 202600:00	–	rapid7
Vulnrichment	CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection	31 Aug 202622:15	–	vulnrichment

Vulners

Node

qvidium opera11Match3.3.2a26-ax4x-opera11

[
  {
    "vendor": "QVidium",
    "product": "Opera11",
    "versions": [
      {
        "version": "3.3.2a26-Ax4x-opera11",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:qvidium:opera11_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "CGI Script"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/397334
vuldb	www.vuldb.com/submit/880050
vuldb	www.vuldb.com/vuln/397334/cti
uvxbywu62qm	www.uvxbywu62qm.feishu.cn/wiki/Tn2ewwaafigfabkMWJJcc3rhnud
vuldb	www.vuldb.com/cve/CVE-2026-82971

Parameter	Position	Path	Description	CWE
ipaddr	query param	/cgi-bin/net_tr.cgi	Command injection via manipulated ipaddr parameter in /cgi-bin/net_tr.cgi	CWE-74, CWE-77

01 Sep 2026 20:47Current

6.9Medium risk

Vulners AI Score6.9

CVSS 410

CVSS 3.110

CVSS 210

CVSS 310

EPSS0.01881

SSVC