CVE-2026-124585

A vulnerability exists in the Web Administration Interface of Chengdu Feiyuxing Technology VW2100 and VEC10GP (version 1.0 B-MB3W202-210825-r11775). The flaw resides in the add_expmac function within the var/html/webserver file. By manipulating the mac argument, an attacker can perform a remote O...

CVE-2026-124580

A critical OS command injection vulnerability exists in the Weixin Auth Endpoint component of Chengdu Feiyuxing Technology products, specifically the VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775 . The flaw is located in the handle_wechat_cn_wifi function within the var/html/webserver file. Atta...