CVE-2026-126723

The Rooxis RXR-12 Wi-Fi router is vulnerable to an authenticated command injection flaw in the LuCI white_list RPC handler located at /usr/lib/lua/luci/data/white_list_plt.lua. The root cause is the lack of validation for user-supplied MAC addresses , which are concatenated into os.execute() with...