CVE-2026-121930

Name of the Vulnerable Software and Affected Versions Linksys WRT54GL version 4.30.18

Description An OS command injection flaw exists in the Ping Diagnostic component. A remote network attacker with administrator credentials can execute arbitrary operating system commands by manipulating the ping ip argument passed to the system() function within the 'apply.cgi' file. This occurs because the input is not properly sanitized before being processed by the system shell.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.