CVE-2026-58457

The Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to an unauthenticated OS command injection in the commuos web backend . The root cause is the lack of input sanitization in the smacfilter_conf handler, where the name , enable , and mac GET parameters are passed directly...

Metasploit Wrap-Up 09/12/25

New LightHouse Studio RCE module This week we've added a new module that exploits an unauthenticated template injection vulnerability CVE-2025-34300 in Sawtooth Software’s Lighthouse Studio, allowing arbitrary Perl execution via survey templates in versions prior to 9.16.14. This module has the...