CVE-2025-11073 | Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019 HTTP POST Request /cgi-bin/luci/api/cmd url command injection

September 26, 2025 Yanac

A vulnerability labeled as critical has been found in Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection.

This vulnerability is reported as CVE-2025-11073. The attack can be launched remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More