CVE-2026-581469.4CriticalCWE-78
Unauthorized remote code execution in T-Mobile 5G Box IDU routers
WNC · T-Mobile 5G Box IDU
Not in CISA KEVVendor fix available
2.9%probability of exploitation in the next 30 days
86th percentile
050100
Higher than 86% of scored CVEs
9.4CriticalCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_cookie POST parameter. The cli_cookie parameter value is directly concatenated into a find command string without proper sanitization. This allows a remote, unauthenticated attacker to inject and execute arbitrary shell commands as root on the underlying operating system. This issue has been fixed in firmware version 1.1.0.651412
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Sep.
- Critical WNC flaws expose T-Mobile 5G Box routers to attacksSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.