CVE-2026-24699Active Exploitation(cisco / rv110w)

MEDIUMCVSS 7.2 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for cisco rv110w systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lan_ipv6_prefixlen configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

cisco CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-78

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

rv110w
rv110w_firmware
rv130
rv130_firmware

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

cisco

Products

rv110wrv110w_firmwarerv130rv130_firmwarerv130wrv130w_firmware

4 versions affected across 6 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

https://sec.kaitan.id/cves/CVE-2026-24699

Full discourse1 post

Kaitan ID Security@KaitanSecurity92d
Active Exploitation
⚠️ HIGH — CVE-2026-24699 An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with … ⚡ Exploit in the wild Full analysis → https://sec.kaitan.id/cves/CVE-2026-24699 #Cisco #CyberSecurity #InfoSec
Post summary
Cisco RV130/RV130W hosts a high‑severity OS command injection flaw (CVE‑2026‑24699) that is reportedly being actively exploited, with detailed technical information available via the provided link. No patch or mitigation is mentioned.
0000051
84 followersView on X

CPE platform detail7 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

7 of 7 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	cisco	rv110w	-	-	-
OS	cisco	rv110w_firmware	1.2.2.5	-	-
OS	cisco	rv110w_firmware	1.2.2.8	-	-
HW	cisco	rv130	-	-	-
OS	cisco	rv130_firmware	1.0.3.55	-	-
HW	cisco	rv130w	-	-	-
OS	cisco	rv130w_firmware	1.0.3.55	-	-

Explore more

Back to dashboard cisco CVEs rv110w vulnerabilities