CVE-2026-19379 | EFM ipTIME AX8004M 15.09.0 CGI Endpoint /cgi/d.cgi popen fname os command injection

August 9, 2026 Yanac

A vulnerability has been found in EFM ipTIME AX8004M 15.09.0 and classified as critical. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection.

This vulnerability is handled as CVE-2026-19379. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More