CVE-2026-35018: NetComm NF20MESH < R6B032 Authenticated RCE via OS Command Injection
NetComm Wireless Pty Ltd · NF20MESH
Vendor fix available · Affected: NetComm Wireless Pty Ltd NF20MESH · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 70% of scored CVEs
DescriptionCVE.org
NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the username JSON parameter processed by the dalStorage_addUserAccount function. Attackers can exploit the unsafe concatenation of user-supplied input into a shell command string passed to rut_doSystemAction without sanitization to achieve full root-level command execution on the underlying operating system.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- NetComm Wireless Pty Ltd · NF20MESHbefore R6B032
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- NetComm Wireless Pty Ltd
- Published
- June 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-35018 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.