Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2026-24697: Cisco RV130/RV130W and RV110W Router Command Execution Risk
CVE-2026-24697 · published 3 months ago
Summary
Authenticated attackers can execute arbitrary system commands on affected routers, potentially allowing them to gain full control. This risk is particularly concerning for organizations that rely on these routers for network security and access. Cisco has identified this issue and should be contacted for a fix or update.
Original advisory text
An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The ...
An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The wan_hostname configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.2
High
Type
CWE-78OS Command Injection
Timeline
Published8 Jul 2026
Updated31 Oct 2026
First seen8 Jul 2026
Track software like this
Free during beta