CRITICAL 10.0 NVD
CVE-2026-108576
A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manip
A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
References
- https://github.com/danish1162/CVE-2026-2035703-x300/security/advisories/GHSA-qcpp-vfr2-v24
- https://vuldb.com/cve/CVE-2026-108576
- https://vuldb.com/submit/956290
- https://vuldb.com/vuln/416233
- https://vuldb.com/vuln/416233/cti
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-10-11 via NVD.
Risk Timeline
CVE Disclosed2026-10-11 · 0 days ago
Remediation Resources
Official Advisory
vuldb.com/cve/CVE-2026-108576Official Advisory
vuldb.com/vuln/416233Analysis & PoC
vuldb.com/submit/956290
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.