CVE-2026-75937EPSS p42.7%

CVE-2026-75937CVE-2026-75937

Description

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.

Scoring

EPSS0.53% probability of exploitation · percentile 42.7% · 2026-10-05T12:00:23Z
Last modified2026-10-03
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.