Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2026-58457 EUVD-2026-41128GHSA-gfhx-3hfg-x9hv

Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

Published Jul 1, 2026 · Updated Jul 6, 2026 · Assigned by VulnCheck

Vendor: Shenzhen Aitemi E Commerce Product: M300 Wi-Fi Repeater

Description

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passed without sanitization into sprintf() to build uci shell commands executed via doSystemCmdComlib(), granting full root-level control of the device.

Affected products

VendorProductAffectedFixed
Shenzhen Aitemi E Commerce M300 Wi-Fi Repeater — —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • J4ck3LSyN-Gen2/CVE-2026-58457 ★ 4 · Jul 16, 2026

    PoC tools for CVE-2026-58457: Unauthenticated OS Command Injection leading to remote root on Shenzhen Aitemi M300 Wi-Fi Repeater (MT02). Includes exploit, validator, payload generator, and Metasploit…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References