CVE-2026-19771 | Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA LuCI Web Interface /cgi-bin/luci MaxHops/Timeout/Size os command injection

August 13, 2026 Yanac

A vulnerability categorized as critical has been discovered in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection.

This vulnerability is traded as CVE-2026-19771. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More