What is CVE-2026-19348?
A command injection vulnerability exists in Shenzhen Aitemi M300 Wi-Fi Repeater version r0-ea7890a, affecting the `sprintf` function in the protocol file. This flaw could allow remote code execution via manipulated arguments. Users should restrict access to the management interface until a patch is released.
Azərbaycanca: Shenzhen Aitemi M300 Wi-Fi Repeater cihazının r0-ea7890a versiyasında command injection zəifliyi aşkar edilib. Təhlükə protokol faylındakı `sprintf` funksiyasına təsir edir. İstifadəçilər dərhal istehsalçıdan yamaq təmin olunana qədər cihazın idarəetmə interfeysinə girişi məhdudlaşdırmalıdır.
Related CVEs
link basis: same weakness class CWE-77
FAQ2
Which device and version are affected by CVE-2026-19348?
The vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater version r0-ea7890a.
What risk could arise if CVE-2026-19348 is exploited?
This command injection vulnerability could lead to remote code execution (RCE) via manipulated arguments through the `sprintf` function in the protocol file.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.