VULNERABILITY INTELLIGENCE

CVE-2026-30703

CVSS score9.8 CRITICAL

EPSS probability1.09%

CISA KEVNot currently listed

Published2026-03-18

Last modified2026-06-17

Description

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input provided to a command-related parameter in the sysCMD functionality.