CyberRota
← Ana sayfaya dön

CVE-2026-36828

HIGH · CVSS 8.8 EPSS %1.67

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-19T17:16:22.080 · Çekilme zamanı: 2026-06-17T12:01:20.936639+00:00

CyberRota Yorumu

Saldırganın giriş yapmış olması gerekebilir.

CVE
CVE-2026-36828
Severity
HIGH
CVSS
8.8
EPSS
%1.67

Orijinal NVD Açıklaması

A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7. The CGI component allows authenticated users to execute arbitrary shell commands with root privileges via the action=runcmd parameter.