CVE-2026-24698

HIGH

Cisco RV130/RV130W <=1.0.3.55 & RV110W 1.2.2.5/8 - Auth OS Command Injection via save_syslog_to_file

Title source: llm

Description

An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The model_name configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

References (1)

Core 1

Core References

https://github.com/glkfc/IoT-Vulnerability/blob/main/cisco/RV130/3/wp-en.md

View Writeup ZIP pw:eip

Scores

CVSS v3 7.2

EPSS 0.0096

EPSS Percentile 57.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-78

Status published

Products (4)

cisco/rv110w_firmware 1.2.2.5

cisco/rv110w_firmware 1.2.2.8

cisco/rv130_firmware 1.0.3.55

cisco/rv130w_firmware 1.0.3.55

Published Jul 08, 2026

Tracked Since Jul 08, 2026