Skip to content
OpenAdvisories

Vendor

WNC

6 known vulnerabilities.

Products

T-Mobile 5G Box IDU 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-58147

    Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers

    WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the http_passwd_hidden and http_passwdConfirm_hidden paramete…

    WNC T-Mobile 5G Box IDU
  • Critical 9.4
    CVE-2026-58146

    Unauthorized remote code execution in T-Mobile 5G Box IDU routers

    WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_cookie POST parameter. The cli_cookie parameter value is directly concatenated i…

    WNC T-Mobile 5G Box IDU
  • Critical 9.3
    CVE-2026-40855

    Command Injection in T-Mobile 5G Box IDU router via ping functionality

    WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the ping_ip, ping_size, and ping_times POST parameters. The root cause is t…

    WNC T-Mobile 5G Box IDU