CVE-2026-124585criticalCWE-77CWE-78

CVE-2026-124585: falha crítica em Chengdu Feiyuxing Technology VW2100

Chengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injection

Publicada em

Seguir esta CVE+ Monitorar VEC10GP+ Monitorar VW2100

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

48Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 9.4epss 2.2%
A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This issue affects the function add_expmac of the file var/html/webserver of the component Web Administration Interface. The manipulation of the argument mac results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Produtos afetados
Chengdu Feiyuxing Technology · VEC10GPChengdu Feiyuxing Technology · VW2100
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Chengdu Feiyuxing Technology VW2100

No mesmo produto, das mais perigosas para as menos.

CVE-2026-124580CRITICALChengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injectionEPSS 2.8%