THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19379 (HIGH 7.3) — A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publi

[NVD] CVE-2026-19379 (HIGH 7.3) — A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publi

mednvdPublished 2026-08-10

CVE-2026-19379 CVSS: 7.3 HIGH Published: 2026-08-10T01:16:47.980

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was cont

Indicators of compromise

CVE-2026-19379cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19379