CVE-2026-124580 | BDVDB-2026-402427 Detail
Chengdu Feiyuxing TechnologyVW2100
Description#
A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi of the file var/html/webserver of the component Weixin Auth Endpoint. The manipulation of the argument extend results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
References#
- https://vuldb.com/vuln/432937
- https://vuldb.com/vuln/432937/cti
- https://vuldb.com/cve/CVE-2026-124580
- https://vuldb.com/submit/1038438
- https://github.com/Walnut1337/Feiyuxing_VROS_command_injection/blob/main/README.md
- https://github.com/Walnut1337/Feiyuxing_VROS_command_injection/blob/main/poc_weixin_auth.py
Exploit#
History#
- Version 1Record published in the CVE List.