CVE-2026-24697

HIGH

Cisco RV130/RV130W <=1.0.3.55 & RV110W 1.2.2.5/8 Auth RCE via wan_hostname in start_bonjour()

Title source: llm

Description

An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The wan_hostname configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

References (1)

Core 1

Core References

https://github.com/glkfc/IoT-Vulnerability/blob/main/cisco/RV130/2/wp-en.md

View Writeup ZIP pw:eip

Scores

CVSS v3 7.2

EPSS 0.0096

EPSS Percentile 57.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-78

Status published

Products (4)

cisco/rv110w_firmware 1.2.2.5

cisco/rv110w_firmware 1.2.2.8

cisco/rv130_firmware 1.0.3.55

cisco/rv130w_firmware 1.0.3.55

Published Jul 08, 2026

Tracked Since Jul 08, 2026