https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T00:44:31.126220+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-41925 CVE-2026-41925 — WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time) 2026-10-10T00:44:31.141407+00:00

Affected: Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender

WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the reboot_time POST parameter. Attackers can send a crafted request with shell metacharacters in the reboot_time parameter when reboot_enabled=1 to achieve remote code execution.