CVE Notifier

CVE-2026-58147 CWE-78 N/A

Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the http_passwd_hidden…

cve.org WNC:T-Mobile · 5G · Box 16 Sep 2026

CVE-2026-58146 CWE-78 N/A

Unauthorized remote code execution in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_cookie POST parameter. The cli_cookie par…

cve.org WNC:T-Mobile · 5G · Box 16 Sep 2026

CVE-2026-40857 CWE-352 N/A

CSRF token bypass in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_token_value parameter, accepting any arbitrary val…

cve.org WNC:T-Mobile · 5G · Box 16 Sep 2026

CVE-2026-40856 CWE-306 N/A

Config disclosure in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sens…

cve.org WNC:T-Mobile · 5G · Box 16 Sep 2026

CVE-2026-40855 CWE-78 N/A

Command Injection in T-Mobile 5G Box IDU router via ping functionality

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the ping_ip, ping_size, and ping_tim…

cve.org WNC:T-Mobile · 5G · Box 16 Sep 2026

CVE-2026-40854 CWE-290 N/A

Session auth bypass via cookie value in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a …

cve.org WNC:T-Mobile · 5G · Box 16 Sep 2026

CVE-2026-92463 CWE-862 6.5

yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing

yshop-crm through 2.1.3 contains an authorization failure in the GET /admin-api/system/user/page endpoint where the @PreAuthorize annotation is commented out, allowing authenticated back-office users without system:user:…

cve.org guchengwuyue:yshop-crm 16 Sep 2026

CVE-2026-92462 CWE-862 6.5

yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep

yshop-crm through 2.1.3 fails to enforce authorization checks on the CrmFlowController deleteFlowStep endpoint, allowing any authenticated back-office user to delete arbitrary approval workflow steps. Attackers can invok…

cve.org guchengwuyue:yshop-crm 16 Sep 2026

CVE-2026-92461 CWE-862 4.3

yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint

yshop-crm through 2.1.3 contains a missing authorization vulnerability in the GET /admin-api/crm/flow/flow-users endpoint that allows any logged-in back-office user to access approval workflow data. Attackers can retriev…

cve.org guchengwuyue:yshop-crm 16 Sep 2026

CVE-2026-92460 CWE-862 6.5

yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing

yshop-crm through 2.1.3 fails to enforce authorization on the GET /admin-api/crm/operatelog/page endpoint, allowing any authenticated back-office user to access the installation-wide audit trail. Attackers can query the …

cve.org guchengwuyue:yshop-crm 16 Sep 2026

CVE-2026-92459 CWE-862 6.5

yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint

yshop-crm through 2.1.3 contains a missing authorization vulnerability in the CrmCluesController receiveCustomer endpoint that allows authenticated back-office users to claim sales leads without proper permission checks.…

cve.org guchengwuyue:yshop-crm 16 Sep 2026

CVE-2026-92458 CWE-862 4.3

yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale

yshop-crm through 2.1.3 contains a missing authorization vulnerability in the StoreProductController onSale handler that allows authenticated back-office users to modify product sale status. Attackers can invoke the GET …

cve.org guchengwuyue:yshop-crm 16 Sep 2026