CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlink HG323RW An authenticated limited web user can upload a shell script through the Netlink HG323RW diagnostic import handler and have the UID-0 BOA process execute it. Authentication and valid verification/CSRF values are required; this...

Exploit for CVE-2026-96515

CVE-2026-96515: authenticated root command execution in Netlin...

CVE-2021-44132

A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...

CVE-2021-44132

A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...

PT-2022-12001

Name of the Vulnerable Software and Affected Versions C-DATA ONU4FERW version 2.1.13 X139 Description A command injection issue in the function formImportOMCIShell allows attackers to execute arbitrary commands via a crafted file. Recommendations For version 2.1.13 X139, consider disabling the...

CVE-2021-44132: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...