CVE-2026-94138

LOWCVSS 2.0 · LOW

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /send_order.cgi?parameter=del_expmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Hugo | DevOps | Cybersecurity@HugoValters22h
CVE-2026-94138: command injection in Feiyu Star Router B-MB5E202 via /send_order.cgi (mac arg), CVSS 6.6. Public exploit, remote, no vendor response. Unpatched — restrict exposure now. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94138 #ChengduFeiyuxingTechnology #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
0000035
1.1K followersView on X

Explore more

Back to dashboard