CVE-2026-30703

The affected product is the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The vulnerability is a command injection in the web management interface via the adm.cgi endpoint, where a command-related parameter used by the sysCMD functionality is not properly sanitized. This could allow an ...