{"id":"CVE-2026-121606","published":"2026-11-04T01:17:23.880","lastModified":"2026-11-04T01:17:24.050","description":"A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firmware Signature Verification. Such manipulation of the argument sign leads to improper verification of cryptographic signature. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-345","CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/gajgdm6-cpu/cf98af20ddb77f27a7c112214a6280f7","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-121606","tags":[]},{"url":"https://vuldb.com/submit/1023261","tags":[]},{"url":"https://vuldb.com/vuln/430443","tags":[]},{"url":"https://vuldb.com/vuln/430443/cti","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/gajgdm6-cpu/cf98af20ddb77f27a7c112214a6280f7","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows remote attackers to bypass firmware signature verification by manipulating the 'sign' argument in the verify_sign function, enabling execution of untrusted firmware on affected devices.","exploitability":"Exploitation is straightforward and can be performed remotely without authentication or user interaction, as a public exploit exists.","blast_radius":"Successful exploitation could lead to full device compromise, including arbitrary code execution, data exfiltration, and denial of service, especially in critical infrastructure or enterprise environments using these devices.","remediation":"Upgrade affected devices to firmware version 6.4.10 or later, as no fixed version is explicitly named in the description beyond 'up to 6.4.9'. If upgrading is not immediately possible, disable firmware update functionality and restrict network access to the affected endpoints.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["signature-bypass","firmware","remote-exploit","ics"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:42:44.911Z"}}