https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:11:50.276820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-369677 EUVD-2026-369677 2026-10-08T03:11:50.331836+00:00 EUVD-2026-369677 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40855 fkie_cve-2026-40855 2026-10-08T03:11:50.331872+00:00

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the ping_ip, ping_size, and ping_times POST parameters. The root cause is the failure to verify and sanitize user-supplied input before incorporating it into a system command. This allows an authenticated attacker to execute arbitrary commands on the shell and gain root access to the system.This issue has been fixed in firmware version 1.1.0.651412

 https://cve.radiocsirt.org/vuln/ghsa-5qwp-rxmm-2vwh GHSA-5qwp-rxmm-2vwh 2026-10-08T03:11:50.331906+00:00

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the ping_ip, ping_size, and ping_times POST parameters. The root cause is the failure to verify and sanitize user-supplied input before incorporating it into a system command. This allows an authenticated attacker to execute arbitrary commands on the shell and gain root access to the system.This issue has been fixed in firmware version 1.1.0.651412