CVE-2026-40855Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the ping_ip, ping_size, and ping_times POST parameters. The root cause is the failure to verify and sanitize user-supplied input before incorporating it into a system command. This allows an authenticated attacker to execute arbitrary commands on the shell and gain root access to the system.This issue has been fixed in firmware version 1.1.0.651412

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://cert.pl/posts/2026/09/CVE-2026-40854

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-40855

Full discourse1 post

CVE@CVEnew46d
Disclosure
CVE-2026-40855 WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, speci… https://www.cve.org/CVERecord?id=CVE-2026-40855
Post summary
The tweet discloses CVE‑2026‑40855, a command injection flaw in the ping function of a T‑Mobile 5G Box IDU router’s /cgi-bin/portal.cgi endpoint, providing a CVE link but no patch or exploit details.
00000917
58.1K followersView on X

Explore more

Back to dashboard