CVE-2026-2686

A security vulnerability has been detected in SECCN Dingcheng G10 3.1.0.181203. This impacts the function qq of the file /cgi-bin/session_login.cgi. The manipulation of the argument User leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

• https://github.com/cha0yang1/SECCN/blob/main/UnauthorizedRCE.md
• https://github.com/cha0yang1/SECCN/blob/main/UnauthorizedRCE.md#2-vulnerability-reproduction-proof-of-concept
• https://vuldb.com/?ctiid.346488
• https://vuldb.com/?id.346488
• https://vuldb.com/?submit.754200