CVE-2022-30023
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
CVSS
8.8
Alto
EPSS
39.2%
p99
KEV
—
Exploit Today
30
0-100
Publicado: 16 jun 2022 · Última mod.: 9 jul 2026 · CWE-78
39.2%EPSS · 30 días39.2%
2026-09-302026-10-28
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1158057.8 ALT—
———Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path.2hCVE-2026-908689.9 CRÍ—
———An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.3hCVE-2026-908659.0 CRÍ—
———An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.3hCVE-2026-1073268.8 ALT—
———IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.3hCVE-2026-1043084.3 MED—
———IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an OS command.3hCVE-2026-978549.8 CRÍ—
———Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.4h