CVE-2026-24699

HIGH

Cisco RV130, RV130W and RV110W - Authenticated OS Command Injection via lan_ipv6_prefixlen Parameter in rc Binary

Title source: llm

Description

An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lan_ipv6_prefixlen configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

References (1)

Core 1

Core References

https://github.com/glkfc/IoT-Vulnerability/blob/main/cisco/RV130/4/wp-en.md

View Writeup ZIP pw:eip

Scores

CVSS v3 7.2

EPSS 0.0096

EPSS Percentile 57.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-78

Status published

Products (4)

cisco/rv110w_firmware 1.2.2.5

cisco/rv110w_firmware 1.2.2.8

cisco/rv130_firmware 1.0.3.55

cisco/rv130w_firmware 1.0.3.55

Published Jul 08, 2026

Tracked Since Jul 08, 2026