SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-38710

HIGH · CVSS 7.2 EPSS 2.55%

Source: NVD + CISA KEV + EPSS · Published 2026-07-31 · Last synced 2026-08-30

CyberRota Analysis

AI-Generated

The command injection vulnerability in the system.setclock interface of TR1200 v2.4.15 and TR3000 v2.4.21 allows attackers to execute arbitrary commands with root privileges through specially crafted input. This poses a significant risk to system integrity and confidentiality, making it crucial for organizations using these versions to prioritize patching or mitigating this vulnerability. Immediate action is recommended for users of affected products to prevent potential exploitation.

CVE
CVE-2026-38710
Severity
HIGH
CVSS
7.2
EPSS
2.55%

Original NVD Description

TR1200 v2.4.15 and TR3000 v2.4.21 were discovered to contain a command injection vulnerability in the system.setclock interface. This vulnerability allows attackers to execute arbitrary commands as root via a crafted input.