{"id":"CVE-2026-124580","published":"2026-11-09T08:17:02.923","lastModified":"2026-11-09T08:17:03.070","description":"A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-77","CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/Walnut1337/Feiyuxing_VROS_command_injection/blob/main/README.md","tags":[]},{"url":"https://github.com/Walnut1337/Feiyuxing_VROS_command_injection/blob/main/poc_weixin_auth.py","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-124580","tags":[]},{"url":"https://vuldb.com/submit/1038438","tags":[]},{"url":"https://vuldb.com/vuln/432937","tags":[]},{"url":"https://vuldb.com/vuln/432937/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/Walnut1337/Feiyuxing_VROS_command_injection/blob/main/README.md","tags":[]},{"url":"https://github.com/Walnut1337/Feiyuxing_VROS_command_injection/blob/main/poc_weixin_auth.py","tags":[]}],"hasPoc":true,"ai":{"summary":"A remote OS command injection vulnerability exists in the Weixin Auth Endpoint of Chengdu Feiyuxing Technology VW2100 and VEC10GP devices, where unsanitized input in the 'extend' argument to handle_wechat_cn_wifi allows attackers to execute arbitrary commands on the underlying system. This is a critical flaw (CVSS 10.0) with no authentication or user interaction required.","exploitability":"Exploitation is trivial and requires only sending a specially crafted HTTP request to the affected endpoint; public exploits are available and require no privileges or user interaction.","blast_radius":"Successful exploitation grants full system compromise, enabling complete confidentiality, integrity, and availability loss on the affected device, potentially allowing attackers to pivot into internal networks.","remediation":"Upgrade to firmware version B-MB3W202-210825-r11776 or later (the vendor's next release after r11775), as no patch is available for the current version; if unavailable, disable the Weixin Auth Endpoint functionality and restrict access to the /var/html/webserver endpoint at the network level.","detection":"Defenders should monitor web server access logs for requests to the Weixin Auth Endpoint containing shell metacharacters (e.g., ';', '|', '&', '$(') or suspicious command patterns in the 'extend' parameter; however, no specific log format or observable artifact is named in the CVE description beyond the endpoint and parameter.","tags":["rce","command-injection","webapp","ics","public-exploit"],"model":"garnet-coder","analyzedAt":"2026-11-09T09:41:34.996Z"}}