CVE-2026-30703

Published: Mar 18, 2026 Last Modified: Mar 18, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The adm.cgi endpoint improperly sanitizes user-supplied input provided to a command-related parameter in the sysCMD functionality.

https://mstreet97.github.io/security-research/iot/vulnerabi…
https://mstreet97.github.io/security-research/iot/vulnerability-disclosure/cybe…
https://www.made-in-china.com/showroom/yeapook/#:~:text=Est…
https://www.made-in-china.com/showroom/yeapook/#:~:text=Established%20in%202015…