cbcvebase.

Themactep Thingino-Firmware vulnerabilities

1 known vulnerability affecting themactep/thingino-firmware.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-26213P1CRITICALCVSS 9.8≤ firmware-2026-03-162026-03-26
CVE-2026-26213 [CRITICAL] CWE-78 CVE-2026-26213: thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os comm thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows remote attackers to execute arbitrary commands as root by injecting malicious code through unsanitized HTTP parameter names. Attackers can exploit the eval function in pars
nvd
Themactep Thingino-Firmware vulnerabilities | cvebase