https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T04:12:23.389105+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-118865 fkie_cve-2026-118865 2026-11-09T04:12:23.392798+00:00

An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command.

Successful exploitation may allow arbitrary command execution on the affected device.

 https://db.gcve.eu/vuln/ghsa-4fc4-c4rx-qxh4 GHSA-4fc4-c4rx-qxh4 2026-11-09T04:12:23.392901+00:00

An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command.

Successful exploitation may allow arbitrary command execution on the affected device.