CVE-2026-126724
Last modified
CVE-2026-126724 is a vulnerability of currently unknown severity. Rooxis RXR-12 Wi-Fi router contains an undocumented UID-0 backdoor account (dg) with a firmware-wide default password (ivanlee) and interactive shell (/bin/ash), allowing authentication as root via SSH or local console without device-specific secrets. Firmware 20260813_c2169ea5 removes the account from the shipped root filesystem and disables root password authentication in SSH. EPSS estimates a 0.22% chance of exploitation in the next 30 days.
Description
Rooxis RXR-12 Wi-Fi router contains an undocumented UID-0 backdoor account (dg) with a firmware-wide default password (ivanlee) and interactive shell (/bin/ash), allowing authentication as root via SSH or local console without device-specific secrets. Firmware 20260813_c2169ea5 removes the account from the shipped root filesystem and disables root password authentication in SSH. Users can update their router can be through the local web interface.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Rooxis | Rooxis RXR-12 | < 20260813_c2169ea5 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-126724?
How severe is CVE-2026-126724?
How do I fix CVE-2026-126724?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-1267IBM Planning Analytics Local 2.1.0 through 2.1.17 could allo…6.5
- CVE-2026-12670IBM MQ could allow an authenticated attacker to cause a deni…6.5
- CVE-2026-12672Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2026-126720Rooxis RXR-12 Wi-Fi router contains an unauthenticated remot…
- CVE-2026-126722Rooxis RXR-12 Wi-Fi router contains an undocumented telnet b…
- CVE-2026-126723Rooxis RXR-12 Wi-Fi router contains an authenticated command…
- CVE-2026-12673Liquidfiles versions before 4.2.12 are affected by a broken …5.9
- CVE-2026-126757A security vulnerability has been detected in Moonshot AI Ki…4.3
- CVE-2026-126758A vulnerability was detected in Moonshot AI Kimi Code up to …4.4
- CVE-2026-126759A flaw has been found in H3C ICG2000 Unified Communication G…5.3
- CVE-2026-126766OpsTree REMS through 1.0.0 contains an improper authorizatio…4.3
- CVE-2026-126767OpsTree REMS through 1.0.0 contains a prompt injection vulne…4.3
Are you affected by CVE-2026-126724?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST