Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The machine_name configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 6 products
⚠️ HIGH — CVE-2026-24700 An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with… ⚡ Exploit in the wild Full analysis → https://sec.kaitan.id/cves/CVE-2026-24700 #Cisco #CyberSecurity #InfoSec
Post summary
High severity OS command injection in Cisco RV130 is being actively exploited, but no PoC, exploit code, or patch information is provided.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | cisco | rv110w | - | - | - |
| OS | cisco | rv110w_firmware | 1.2.2.5 | - | - |
| OS | cisco | rv110w_firmware | 1.2.2.8 | - | - |
| HW | cisco | rv130 | - | - | - |
| OS | cisco | rv130_firmware | 1.0.3.55 | - | - |
| HW | cisco | rv130w | - | - | - |
| OS | cisco | rv130w_firmware | 1.0.3.55 | - | - |