EUVD-2026-80670

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the pingip, pingsize, and pingtimes POST parameters. The root cause is the failure to verify and sanitize...

EUVD-2013-3243

Malware in sbrugna...

CVE-2013-3307: Improper Neutralization of Special Elements used in an OS Command

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi pingip parameter on TCP port 52000...

Linksys’ various products have vulnerabilities related to operating system command injection.

The Linksys E1000, among others, is a router from Linksys USA. An operating system command injection vulnerability exists in various Linksys products. The vulnerability stems from the presence of shell metacharacters in the pingip parameter of apply.cgi on TCP port 52000, which could lead to OS...

Zyxel EMG2926 Code Execution

The vulnerability of the Zyxel EMG2926 router’s microprogramming software is related to insufficient checking of the command arguments entered by users. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pingip parameter...

VulnCheck KEV: CVE-2013-3307

Linksys x3000 firmware is vulnerable to a command injection vulnerability via the pingip parameter...

VulnCheck KEV: CVE-2017-6884

Zyxel EMG2926 routers contain a command injection vulnerability located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute malicious commands on the router, such as the pingip parameter to the expert/maintenance/diagnostic/nslooku...

Command injection

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00AAQT.4b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such ...

CVE-2017-6884

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00AAQT.4b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such ...

CVE-2017-6884: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00AAQT.4b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such ...

CVE-2017-6884

A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00AAQT.4b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such ...