DCBI-Netlog-LAB v1.0 - Command Injection

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...

CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

CVE-2023-26802

creationtimestamp| type| source ---|---|--- 2023-03-27 00:39:19+00:00| seen| https://t.me/cibsecurity/60762 2023-05-26 16:50:05+00:00| seen| https://t.me/truesecator/4428 2025-06-18 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrvvsyxfcz2u 2025-07-07 00:00:00+00:0...

CVE-2023-26802

DCBI-Netlog-LAB v1.0 (DCN) contains a command-injection flaw in /network_config/nsg_masq.cgi that allows unauthenticated attackers to bypass auth and execute arbitrary OS commands via a crafted request. Affected product: DCBI-Netlog-LAB v1.0; impact per sources is high (unathenticated, arbitrary ...