CVE-2026-126723 | Rooxis RXR-12 prior 20260813_c2169ea5 LuCI white_list RPC handler white_list_plt.lua os.execute mac os command injection

November 11, 2026 Yanac

A vulnerability classified as very critical was found in Rooxis RXR-12. This impacts the function os.execute of the file /usr/lib/lua/luci/data/white_list_plt.lua of the component LuCI white_list RPC handler. Executing a manipulation of the argument mac can lead to os command injection.

This vulnerability is tracked as CVE-2026-126723. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More