CVE-2026-40854

Name of the Vulnerable Software and Affected Versions WNC T-Mobile 5G Box IDU router versions prior to 1.1.0.651412

Description The portal.cgi component contains two security issues. First, an authentication bypass exists because the session verification mechanism improperly validates the sessionid cookie by checking for a file in /tmp/login user. An attacker can gain unauthorized access to the administration panel by using directory entries like . or .. in the cookie. Second, an OS command injection exists in the password change functionality. The application fails to neutralize special elements in the http passwd hidden and http passwdConfirm hidden parameters, allowing an authenticated attacker to execute arbitrary commands on the operating system with root privileges.

Recommendations Update to firmware version 1.1.0.651412.