Mmastodon TechnologyCybersecurity first seen 11 h ago, last 11 h ago, peak #11

Critical command injection flaw disclosed in TOZED X300

Original: 🔴 CVE-2026-108576 - Critical (10) A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the f

A critical vulnerability, CVE-2026-108576, has been found in the TOZED X300 router running firmware up to version 6.01.3. The flaw sits in the IPPingDiagnostics Handler's process_ping function, where a manipulated Host argument allows operating system command injection. With a maximum severity score of 10, security observers are warning that attackers could potentially exploit it remotely.

Why now: A newly disclosed maximum-severity CVE in widely deployed network hardware raises immediate exploitation and patching concerns.

TOZEDTOZED X300CVE-2026-108576

Open on mastodon →

Evidence

• 🔴 CVE-2026-108576 - Critical (10) A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1933840