CVE-2026-75937

The vulnerability allows unauthenticated attackers to send specially crafted HTTP POST requests to the web administration interface, enabling them to execute arbitrary operating system commands with root privileges. This poses a critical risk as it can lead to complete system compromise. Organizations using affected devices should prioritize immediate mitigation measures, including disabling the web server when not in use, to prevent exploitation.