CyberRota
← Ana sayfaya dön

CVE-2026-31195

HIGH · CVSS 8.8 EPSS %0.23

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-05T16:16:11.183 · Çekilme zamanı: 2026-06-04T12:00:44.208464+00:00

CyberRota Yorumu

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-31195
Severity
HIGH
CVSS
8.8
EPSS
%0.23

Orijinal NVD Açıklaması

The ping diagnostic handler in /bin/httpd_clientside for ALTICE LABS / SFR France GR140DG and GR140IG fibre CPE/Router/Gateway, inserts unsanitized user input into a system() call, allowing authenticated remote attackers to execute arbitrary commands as root via crafted destAddr parameters using shell command substitution.