CVE-2026-58146

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_cookie POST parameter. The cli_cookie parameter value is directly concatenated into a find command string without proper sanitization. This allows a remote, unauthenticated attacker to inject and execute arbitrary shell commands as root on the underlying operating system. This issue has been fixed in firmware version 1.1.0.651412

• CWE-78

• https://cert.pl/posts/2026/09/CVE-2026-40854

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5813A weakness has been identified in PHPGurukul Online Course R…7.3
• CVE-2026-58138Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenti…9.8
• CVE-2026-58139The DuckDB AWS extension for DuckDB contains a security poli…6.5
• CVE-2026-5814A security vulnerability has been detected in PHPGurukul Onl…7.3
• CVE-2026-58143Cotonti Siena 0.9.26 and earlier contains a cross-site reque…8.8
• CVE-2026-58144Cotonti Siena 0.9.26 and earlier contains a stored cross-sit…5.4
• CVE-2026-58147WNC T-Mobile 5G Box IDU router contains an OS command inject…9.3
• CVE-2026-58148Joomla Extension - chronoengine.com - Stored XSS in ChronoFo…8.7
• CVE-2026-58149Joomla Extension - joomdonation.com - User enumeration in Ev…5.3
• CVE-2026-5815A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.0…8.8
• CVE-2026-58150Apache Traffic Server does not reject Transfer-Encoding in H…10
• CVE-2026-58151Apache Traffic Server can be crashed or driven to resource e…8.7