Description
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card.
Medium · 6.8
CVE-2026-30603
EUVD-2026-18370GHSA-5m88-mxpx-x739
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, …
Published Apr 2, 2026 · Updated Jul 5, 2026 · Assigned by mitre