CVE-2026-35018
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk47th percentile — higher than 47% of all known CVEs
Summary
NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the username JSON parameter processed by the dalStorage_addUserAccount function.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows attackers to gain full control over the router's operating system. This could lead to network and data compromise.
Recommendation
It is recommended to update NetComm NF20MESH routers to a firmware version newer than R6B031 to mitigate this vulnerability. Additionally, implementing security measures such as log monitoring and restricting access to the administrative interface is advisable.
Original NVD description (English source)
NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the username JSON parameter processed by the dalStorage_addUserAccount function. Attackers can exploit the unsafe concatenation of user-supplied input into a shell command string passed to rut_doSystemAction without sanitization to achieve full root-level command execution on the underlying operating system.