CVE-2026-36356

CVE-2026-36356: MeiG Smart FORGESLT711 GoAhead — 인증되지 않은 OS 명령 주입 /action/SetRemoteAccessCfg CVE : CVE-2026-36356 CWE : CWE-78, CWE-306 발견자 : Daniil Gordeev 공개일 : 2026-05-03 요약 MeiG Smart FORGESLT711 4G LTE CPE 장치에 번들로 포함된 GoAhead 웹 서버는 인증되지 않은 HTTP 엔드포인트 /action/SetRemoteAccessCfg를 노출하며, 이 엔드포인트...

MeiG Smart FORGE_SLT711 - OS Command Injection

Exploit Title: MeiG Smart FORGESLT711 - OS Command Injection Date: 2026-05-03 Exploit Author: Daniil Gordeev Vendor Homepage: http://www.meigsmart.com Software Link: N/A firmware distributed via carrier channels Version: Firmware MDM9607.LE.1.0-00110-STD.PROD-1 likely all firmware versions of thi...

CVE-2026-36356: Improper Neutralization of Special Elements used in an OS Command

The GoAhead web server on MeiG Smart FORGESLT711 devices firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint...