CVE-2026-121606

Name of the Vulnerable Software and Affected Versions Qihoo 360 D621-2 versions prior to 6.4.9 Qihoo 360 D603-2 versions prior to 6.4.9 Qihoo 360 D600-2 versions prior to 6.4.9 Qihoo 360 D619 versions prior to 6.4.9 Qihoo 360 D606-6 versions prior to 6.4.9 Qihoo 360 D706 versions prior to 6.4.9

Description An issue exists in the Firmware Signature Verification component within the verify sign() function of the fs2/bin/iscm file. A remote attacker can manipulate the sign argument to cause improper verification of the cryptographic signature, allowing the installation of tampered firmware on affected devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.