CVE-2026-121607

A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeedcommand of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiated remotely. The exploit has been made...

CVE-2026-121607

A critical OS command injection vulnerability exists in Qihoo 360 devices, specifically models D603-2, D600-2, D606-6, and D706 running versions up to 6.4.9 . The flaw is located in the testspeed_command function within the file /fs2/bin/iscm, where manipulating the host argument allows for unaut...