EUVD-2026-30954
GHSA-wppq-8vc8-2347
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable CGI (AV:N/AC:L) requires a valid low-privilege account (PR:L) with no user interaction; root command execution yields total C/I/A impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7. The CGI component allows authenticated users to execute arbitrary shell commands with root privileges via the action=runcmd parameter.
AnalysisAI
OS command execution as root in the Panabit PAP-XM320 application delivery/bandwidth-management appliance (versions up to and including v7.7) is possible when an authenticated user submits action=runcmd to the /cgi-bin/tools/ajax_cmd CGI endpoint, letting attacker-supplied input reach a shell. Because the CGI runs with root privileges, any low-privileged authenticated account can achieve full device takeover. A public proof-of-concept write-up exists (SSVC exploitation: poc), but there is no public exploit identified as actively used in the wild; EPSS is low at 0.10% (28th percentile).
Technical ContextAI
The affected component is the ajax_cmd CGI handler under /cgi-bin/tools/ on Panabit's PAP-XM320, a Chinese-vendor network appliance used for application-layer traffic control, bandwidth management, and gateway functions. The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command), where the value passed via the action=runcmd parameter is incorporated into a shell command without adequate sanitization or allow-listing. Because CGI processes on such embedded/appliance platforms commonly execute as root, the injection inherits root privileges directly. CPE data is not usable here (the published CPE is the placeholder cpe:2.3:a:n/a:n/a), so exact product enumeration relies on the vendor product name and the version ceiling of v7.7 stated in the description.
RemediationAI
No vendor-released patch or fixed version is identified in the available data, so no exact upgrade target can be cited; monitor the Panabit vendor site (https://www.panabit.com/) for a release above v7.7 and apply it once published. As compensating controls, remove the appliance's management/CGI interface from any untrusted or internet-facing network and restrict it to a dedicated management VLAN or VPN (trade-off: administrators must connect through the jump path); enforce strong, unique credentials and remove default or shared low-privilege accounts, since exploitation requires an authenticated session (PR:L); and place a reverse proxy or WAF/ACL rule in front of /cgi-bin/tools/ajax_cmd to block or filter requests carrying action=runcmd (trade-off: may break legitimate diagnostic tooling that relies on that endpoint). Reference the researcher advisory (https://secreu.notion.site/CVE-2026-36828-3652c0ab461580f28f50ddc37ce4e1d6) and NVD detail (https://nvd.nist.gov/vuln/detail/CVE-2026-36828) for indicators.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today