← Database

CVE-2024-55026

CRITICAL CVSS: 9.8 Published: 2026-03-03 Modified: 2026-06-17

Description

An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.

Affected Platforms

Weintek EasywebWeintek Cmt-3072Xh2Weintek Cmt-3072Xh2 Firmware

Weakness Type

CWE-256

References