CVE-2026-126720

The Rooxis RXR-12 Wi-Fi router is vulnerable to unauthenticated remote code execution due to an input validation flaw in /usr/bin/cloud_manage . An attacker positioned on-path with access to the hard-coded cloud endpoint can exploit the unsanitized diagnoseParameter field passed to popen() via cl...