CVE-2026-94089

Summary

This vulnerability allows for a stack-based buffer overflow through the manipulation of the id/password arguments in the /webfa_authentication.cgi file, leading to potential remote code execution.

Exploitability

Exploitation is relatively straightforward given the public exploit references, requiring only the manipulation of the id/password arguments.

Blast radius

If exploited, this could result in full control of the device, potentially leading to data theft, denial of service, or further network compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 2.01b06 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.