CVE-2026-58147

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to...

CVE-2026-58146

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

CVE-2026-40856

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

CVE-2026-40855

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

CVE-2026-40857

WNC T-Mobile 5G Box IDU router contains a cross-site request forgery CSRF vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrftokenvalue parameter, accepting any arbitrary value as valid. This allows a remote attacker to perform unauthorized actions on the...

CVE-2026-58147 Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to...

EUVD-2026-80674

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to...

CVE-2026-58147

The WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application fails to properly neutralize special elements in the http_passwd_hidden and http_passwdConfirm_hidden parameters, allowing an authenticate...

CVE-2026-58146

The WNC T-Mobile 5G Box IDU router is affected by an OS command injection vulnerability in the /cgi-bin/portal.cgi endpoint. The cli_cookie POST parameter is concatenated directly into a find command string without sanitization, allowing a remote, unauthenticated attacker on the adjacent network ...

CVE-2026-58146 Unauthorized remote code execution in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

EUVD-2026-80673

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

CVE-2026-40857 CSRF token bypass in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains a cross-site request forgery CSRF vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrftokenvalue parameter, accepting any arbitrary value as valid. This allows a remote attacker to perform unauthorized actions on the...

EUVD-2026-80672

WNC T-Mobile 5G Box IDU router contains a cross-site request forgery CSRF vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrftokenvalue parameter, accepting any arbitrary value as valid. This allows a remote attacker to perform unauthorized actions on the...

CVE-2026-40857

WNC T-Mobile 5G Box IDU routers contain a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_token_value parameter, accepting any arbitrary value as valid. This allows a remote attacker to perform unauthorized actions on...

CVE-2026-40856 Config disclosure in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

CVE-2026-40856

WNC T-Mobile 5G Box IDU routers are affected by an improper access control vulnerability in the wnc_maccheck.cgi endpoint, which is accessible without authentication . A remote attacker can retrieve sensitive configuration data, including the administrator web password , WiFi passphrase , and tec...

EUVD-2026-80671

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wncmaccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi...

CVE-2026-40855

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection in the ping functionality served by the /cgi-bin/portal.cgi endpoint. The unsanitized POST parameters ping_ip , ping_size , and ping_times are passed directly into a system command, allowing an authenticated attacker to execute a...

CVE-2026-40855 Command Injection in T-Mobile 5G Box IDU router via ping functionality

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

EUVD-2026-80670

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...