Skip to content
OpenAdvisories

Vendor

WNC

6 known vulnerabilities.

Products

T-Mobile 5G Box IDU 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-40857

    CSRF token bypass in T-Mobile 5G Box IDU routers

    WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_token_value parameter, accepting any arbitrary value as valid. This allows a remote attac…

    WNC T-Mobile 5G Box IDU
  • High 7.1
    CVE-2026-40856

    Config disclosure in T-Mobile 5G Box IDU routers

    WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the…

    WNC T-Mobile 5G Box IDU
  • High 8.7
    CVE-2026-40854

    Session auth bypass via cookie value in T-Mobile 5G Box IDU routers

    WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user. …

    WNC T-Mobile 5G Box IDU