CVE-2026-11413Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rpc. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-06-06); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-06: 1Mentions · 2026-06-07: 1Mentions · 2026-06-08: 1Patch / Workaround · 2026-06-08: 1Technical Details · 2026-06-07: 1Technical Details · 2026-06-08: 106-0606-0706-08
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-06-061
Disclosure1
2026-06-071
Disclosure1
2026-06-081
Patch1
Full discourse3 posts
  • VulDB 🛡@vuldb
    Disclosure

    We have just added an important vulnerability affecting JingDong JD Cloud Box AX6600 (CVE-2026-11413) https://vuldb.com/vuln/368970

    Post summary

    A new vulnerability (CVE-2026-11413) affecting JingDong JD Cloud Box AX6600 has been registered and a link to the database entry is provided.

    0101061
    2.2K followersView on X
  • NerdieNews@NewsNerdie
    Patch

    🔴 CVE-2026-11413 in JingDong JD Cloud Box AX6600 lets attackers exploit a stack-based buffer overflow to execute arbitrary code. Critical risk to home networks. Patch immediately to prevent full compromise. #NerdieNews #CyberSecurity #Vulnerability https://t.co/MSb41tIIw3

    Post summary

    The tweet highlights CVE‑2026‑11413 as a stack‑based buffer overflow that enables arbitrary code execution, stresses its critical risk, and urges users to apply the available patch immediately.

    0000050
    65 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-11413 A security vulnerability has been detected in JingDong JD Cloud Box AX6600 4.5.3.r4546. The impacted element is the function set_macfilter of the file /sbin/jdcweb_rp… https://www.cve.org/CVERecord?id=CVE-2026-11413

    Post summary

    A new CVE affecting the set_macfilter function of JingDong JD Cloud Box AX6600 has been identified; the record includes no exploit, patch, or active exploitation details.

    00000230
    57.6K followersView on X

Explore more