CVE-2026-94139
highA weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656.
A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /send_order.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument session_id causes command injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://uvxbywu62qm.feishu.cn/wiki/ZvaTwad1viClSYkBYtFcnG7Knve?from=from_copylink cna@vuldb.com
- https://vuldb.com/cve/CVE-2026-94139 cna@vuldb.com
- https://vuldb.com/submit/893914 cna@vuldb.com
- https://vuldb.com/vuln/408056 cna@vuldb.com
- https://vuldb.com/vuln/408056/cti cna@vuldb.com