Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/05/06 8:22 p.m.•24 views

CVE-2026-31196

The traceroute diagnostic handler in /bin/httpdclientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system call, allowing authenticated remote attackers to execute arbitrary commands as root via crafted destAddr parameters usi...

8.8CVSS6.1AI score0.02272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/05 12:00 a.m.•22 views

CVE-2026-31195

OS command injection vulnerability in the ping diagnostic handler in /bin/httpdclientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN8020802R0A, or 3GN8020803R0A inserts unsanitized user input into a system call, allowing authenticated remote attackers to...

6.6AI score0.02272EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/05 12:00 a.m.•28 views

Altice Labs GR140DG和Altice Labs GR140IG 安全漏洞

Both Altice Labs GR140DG and Altice Labs GR140IG are fiber-optic access gateway devices from the Portuguese company Altice Labs. Both devices have security vulnerabilities. The vulnerability stems from the traceroute diagnostic handler in /bin/httpdclientside, which allows uncleaned user input to...

8.8CVSS6.1AI score0.02272EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•10 views

CVE-2026-31196: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability in the traceroute diagnostic handler in /bin/httpdclientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN8020802R0A, or 3GN8020803R0A inserts unsanitized user input into a system call, allowing authenticated remote attackers ...

8.8CVSS6.4AI score0.02272EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/05 12:00 a.m.•6 views

CVE-2026-31195: Improper Neutralization of Special Elements used in an OS Command

OS command injection vulnerability in the ping diagnostic handler in /bin/httpdclientside in ALTICE LABS / SFR France GR140DG Fibre Router with firmware 3GN8020801R13, 3GN8020802R0A, or 3GN8020803R0A inserts unsanitized user input into a system call, allowing authenticated remote attackers to...

8.8CVSS6.4AI score0.02272EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/05 12:00 a.m.•58 views

CVE-2026-31195

The ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway devices are vulnerable to an OS command injection vulnerability in the ping diagnostic handler located at /bin/httpd_clientside . The root cause is the insertion of unsanitized user input from the destAddr parameter into a ...

8.8CVSS6.6AI score0.02272EPSS
SaveExploits0References3
Rows per page
Query Builder