MEDIUM

CVE-2026-94138

2026-09-21 CVSS v3.1

CVSS

6.6

Description

A security flaw has been discovered in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. This impacts an unknown function of the file /send_order.cgi?parameter=del_expmac. The manipulation of the argument mac results in command injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness (CWE)

CWE-74 Injection

CWE-77 Command Injection

References

https://uvxbywu62qm.feishu.cn/wiki/UJfEwIEjJijyHskIuxccnHkTnmh?from=from_copylink https://vuldb.com/cve/CVE-2026-94138 https://vuldb.com/submit/893913 https://vuldb.com/vuln/408055 https://vuldb.com/vuln/408055/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE