Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote attackers to execute arbitrary shell commands by injecting malicious input into the gateway POST parameter. Attackers can exploit unsanitized parameter concatenation in the set_add_routing function to inject shell commands that are executed via popen() with partial output reflected in the HTTP response.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-04 | 2 | Disclosure1General1 |
| 2026-05-05 | 1 | Disclosure1 |
CVE-2026-41923 Unauthenticated Remote Command Injection in WDR201A WiFi Extender Firmware LFMZX28040922V1.02 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41923
Post summary
CVE-2026-41923 reveals an unauthenticated remote command injection vulnerability in the WDR201A WiFi Extender firmware, but the post does not provide any PoC, exploit code, or remediation details.
🚨*CVE* CVE-2026-41923 WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote at… https://www.cve.org/CVERecord?id=CVE-2026-41923 ----- Traducción: CVE-2026-41923 WDR… http://infoflow.cloud`
Post summary
The post announces CVE-2026-41923, an OS command injection vulnerability in a WiFi extender, but only provides the CVE link and no PoC, exploitation evidence, or patch information.
CVE-2026-41923 WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the internet.cgi binary that allows unauthenticated remote at… https://www.cve.org/CVERecord?id=CVE-2026-41923
Post summary
The post announces CVE-2026-41923 as an OS command injection issue in a WiFi extender’s internet.cgi binary, but offers only basic technical details without mentioning PoC, exploitation, or fixes.