CVE WatchJul 9, 2026

CVE-2021-42912

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once log

CVSS

8.8

High

EPSS

10.9%

p95

KEV

—

Exploit Today

0-100

Published: Dec 16, 2021 · Last modified: Jul 9, 2026 · CWE-78

EPSS · 30d

10.9%EPSS · 30 days14.1%

2026-06-302026-07-16

Technical description

FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-341978.8 HIG

99.9%

KEV—80Apache ActiveMQ Improper Input Validation Vulnerability2d CVE-2024-121210.0 CRI

99.9%

KEV—80Progress Kemp LoadMaster OS Command Injection Vulnerability3d CVE-2022-262589.8 CRI

99.6%

KEV—80D-Link DIR-820L Remote Code Execution Vulnerability7d CVE-2026-422718.8 HIG

99.6%

KEV—80BerriAI LiteLLM Command Injection Vulnerability2d CVE-2021-252988.8 HIG

99.5%

KEV—80Nagios XI OS Command Injection7d CVE-2021-252978.8 HIG

98.9%

KEV—80Nagios XI OS Command Injection7d