CVE-2026-19348
Summary
by MITRE • 08/09/2026
A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 08/09/2026
Xxx Xxxxxxxx Xxxxxx Xxxx Xx-xx Xxxxxxxx Xxxxx Xx-xxxxxxx Xxxxxxxx X Xxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxxx Xxx Xxx Xxxxxxxxx Xxxxxxxxxxxxxx. Xxxx Xxxx Xxxxxx Xx Xxx Xxxxxxx Xxxxxxxx Xxxxxxx Xxxxxx Xxx /xxxxxxxx.xxx Xxxx, Xxxxxxxxxxxx Xxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxx Xxx Xxx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxxx_xxxx Xxxxxxxxxxxxx Xxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxx-xxxxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxxx Xxx Xxxxxx/xxxx/xxx Xxxxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxx Xx Xxxxxxxxxx Xxxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxxx Xxxxxx Xxxxxx Xxx Xxx Xxxxxxxxxxx'x Xxxxxxxxx Xxxxxxxx Xxxxx. Xxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xxxx-xxxxxxxx Xxxx Xxxx Xxx Xxx Xxxxxxxx Xxxxxxxx, Xx Xxxxx Xx Xxxxxxxx Xxxxxx Xx Xxxxxxxx Xxxxx Xxxxxxxxxx Xxxx Xxx Xxxxxxxxxxxx Xxxx Xx Xxxxxx Xxxxxxxx. Xxxx Xxxxxxx Xx Xxxxxxxxxxx Xxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxx Xx Xxxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxx Xxxx Xxxxxx Xxxx, Xxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxx Xx Xxx Xxxxxx Xxxx Xxx Xxxxxxxxxx Xx Xxx Xxx Xxxxxx Xxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxx, Xx Xx Xxxxxxx Xxxx Xxxxxxxxxx Xx Xxx Xxxxxxxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxx. Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxxxx Xx Xxxx Xxxxxxxxxx Xxxxxx Xx Xxx Xxxxxxx Xxxxxxxxxxxxxx, Xxxxxxxxxxx Xxxxx Xxx Xxxxxx Xx X Xxxxx Xxxxx Xxx Xxxxxxx Xxxxxxx Xxxxxx Xxx Xxxxx Xxxxxxx. Xxx Xxxxxxxxxxxxx'x Xxxxxxxxxxxxx Xxx Xxxxxx Xxx Xxxxxxxxx Xxxxxx Xxxxx Xxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxxxxxx-xxxxx Xxxxxxxxxx Xx Xxxxxxx Xxx Xxxx, Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxx Xxx Xxxx Xxxxxxx Xxxxxxxxxxx.
Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxx-xx Xxx Xxx-xx Xxxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxx Xx Xx Xxxxxxxx Xxx Xxx Xxxxxxxxx Xxxxxxxxxxxx, Xxxxx Xxxx Xxxxxxx Xx Xxx&xx Xxxxxxxxx Xxxxx.xxx Xxx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx. Xxx Xxxxxx Xxxxxxxxxxxx Xx Xxxxxxx Xxxx Xxxxxxxxxxxxx Xxxxxxxxx Xxx Xxxx Xxxxxxx, Xx Xx Xxxxxxx Xxx Xxxxxxx Xx Xxxxx Xxx Xxxxxxxxx Xxxxxxxxx Xxx Xxx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxxxxxx. Xxxxxxxxxxxxx Xxxxxxxxx Xxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxxxx Xxxxx Xxxxxx Xxxxxxx Xxx Xxxxxxxxx.
Xxx Xxxx Xxxxx Xxxxx Xxxx Xxxxxxxxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxx Xxxxxxxx Xxxxxx Xxx Xxx Xxxxxxxxxxx'x Xxxxxxxxxxxxx Xxxxxxxx Xxxxxxxx. Xxx Xxxxxxx Xxxxxxxx Xxxx Xxxx Xxx Xxxxxxxxxxx Xxxxxx Xxxxxxxxxxxx Xx Xxxx-xxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx Xxxx Xxxx Xxxxxx Xxxxxxx Xxxxxxxx, Xxxxxxxx X Xxxxxx Xxxx Xxx Xxxxxxxxx Xxxxx Xx Xx Xxxxxxxx Xx Xxxxx Xxxxxxxx. Xxxx Xxxxxxxxxx X Xxxxxxx Xxxxxx Xxxxxxxx Xxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxx Xx Xxxxxxxx Xxx Xxxxxxxxxxxx Xxxx Xxxx Xx Xxxxxxxx Xxxxxxxxx Xxxxxx Xxxxxx Xxxxxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxx Xxxx Xxx Xxxxxx Xx Xxxxxxxxx, Xxxxxxx-xxxxx Xxxxxxxx Xxxxx Xxxxxxxx Xxxxxx Xx Xxx Xxxxxxxx Xxx Xxxxxxxxx, Xxx Xxxxxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxxxx. Xxxxxxx Xxxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxx Xxxxxx Xxxxxxxxx Xxx Xxxxxxxx, Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxx, Xxx Xxxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxxxxxxxx Xxxx Xxxxx Xxxxxxxx Xxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx.