PULSEUnderground Intel

LIVE25signals / 24h

FEED

ransomscarlettgroup reclama a sunnybrook.ca · CA · Healthcareransomscarlettgroup reclama a au.bank.in · IN · Financial Servicesransomqilin reclama a Udima · ES · Educationransomqilin reclama a W Interactive · GB · Technologyransomqilin reclama a Proterial · JP · Manufacturingransomrhysida reclama a INTAX, Inc. · Financial Servicesransomkrybit reclama a www.viehhauser-kfz.at · AT · Transportationransombooba project reclama a LifeFone · US · Healthcareransombooba project reclama a National Association of Credit Management · US · Financial Servicesransombooba project reclama a California School Boards Association · US · Educationransombooba project reclama a South Weber City · US · Government & Defenseransombooba project reclama a Programs for Parents, Inc. · US · Educationransombooba project reclama a Circleville Police Department · US · Government & Defenseransomemperador reclama a MAA Group Consulting Engineers · Professional Servicesransomscarlettgroup reclama a sunnybrook.ca · CA · Healthcareransomscarlettgroup reclama a au.bank.in · IN · Financial Servicesransomqilin reclama a Udima · ES · Educationransomqilin reclama a W Interactive · GB · Technologyransomqilin reclama a Proterial · JP · Manufacturingransomrhysida reclama a INTAX, Inc. · Financial Servicesransomkrybit reclama a www.viehhauser-kfz.at · AT · Transportationransombooba project reclama a LifeFone · US · Healthcareransombooba project reclama a National Association of Credit Management · US · Financial Servicesransombooba project reclama a California School Boards Association · US · Educationransombooba project reclama a South Weber City · US · Government & Defenseransombooba project reclama a Programs for Parents, Inc. · US · Educationransombooba project reclama a Circleville Police Department · US · Government & Defenseransomemperador reclama a MAA Group Consulting Engineers · Professional Services

CVE WatchJul 9, 2026

CVE-2022-30023

Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.

CVSS

8.8

High

EPSS

39.2%

p99

KEV

—

Exploit Today

30

0-100

Published: Jun 16, 2022 · Last modified: Jul 9, 2026 · CWE-78

EPSS · 30d

39.2%EPSS · 30 days39.2%

2026-09-302026-10-28

Technical description

Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-1158057.8 HIG

———Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.3h CVE-2026-908689.9 CRI

———An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.4h CVE-2026-908659.0 CRI

———An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.4h CVE-2026-1073268.8 HIG

———IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.4h CVE-2026-1043084.3 MED

———IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an OS command.4h CVE-2026-978549.8 CRI

———Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.5h