CVE-2026-124580criticalCWE-77CWE-78

CVE-2026-124580: falha crítica em Chengdu Feiyuxing Technology VW2100

Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injection

Publicada em

Seguir esta CVE+ Monitorar VEC10GP+ Monitorar VW2100

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

48Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 10epss 2.8%
A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Produtos afetados
Chengdu Feiyuxing Technology · VEC10GPChengdu Feiyuxing Technology · VW2100
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Chengdu Feiyuxing Technology VW2100

No mesmo produto, das mais perigosas para as menos.

CVE-2026-124585CRITICALChengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injectionEPSS 2.2%