VULNERABILITY INTELLIGENCE

CVE-2024-30891

CVSS score8.8 HIGH

EPSS probability1.90%

CISA KEVNot currently listed

Published2024-04-05

Last modified2026-06-17

Description

A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to construct cmdinput parameters for arbitrary command execution.