What is the CVSS score of CVE-2026-36356?

CVE-2026-36356 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.4%.

Which versions of MeiG FORGE_SLT711 are affected by CVE-2026-36356?

MeiG Smart FORGE_SLT711 cellular gateways running firmware MDM9607.LE.1.0-00110-STD.PROD-1 contain a critical unauthenticated remote command injection vulnerability that allows attackers to execute…

Is there a public PoC exploit available for CVE-2026-36356?

Yes, a public proof-of-concept exploit is available for CVE-2026-36356. Prioritise patching immediately. EPSS: 0.4%.

MeiG FORGE_SLT711 CVE-2026-36356

EUVD-2026-27327 CRITICAL

OS Command Injection (CWE-78)

2026-05-05 mitre

Command Injection

9.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

May 05, 2026 - 18:22 vuln.today

CVSS changed

May 05, 2026 - 18:22 NVD

9.1 (CRITICAL)

DescriptionNVD

The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRemoteAccessCfg endpoint.

AnalysisAI

Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-STD.PROD-1 allows attackers to execute arbitrary system commands via the /action/SetRemoteAccessCfg endpoint in the GoAhead web server. CVSS 9.1 reflects critical impact with network-accessible attack vector requiring no authentication or user interaction. …

RemediationAI

Within 24 hours: Inventory all MeiG FORGE_SLT711 devices and firmware versions in production and document network exposure (internal/external access). Within 7 days: Implement network segmentation to restrict access to the GoAhead web server (block inbound traffic to the /action/SetRemoteAccessCfg endpoint); disable remote management features if operationally feasible. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-36356 vulnerability details – vuln.today

Back

MeiG FORGE_SLT711 CVE-2026-36356

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code