CVE-2026-52483: MitraStar GPT-2741GNAC-N2-SV router vulnerability
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BRg8.101.11(WVK.0)b46 allow authenticated users execute arbitrary OS command via concatenated params on a crafted POST request for the endpoint /cgi-bin/device-management-utilities-internet.cgi.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to the router. The vulnerable functionality is exposed through crafted POST requests to /cgi-bin/device-management-utilities-internet.cgi.
Which router firmware is identified as affected?
The affected product identified in the available data is the MitraStar GPT-2741GNAC-N2-SV router running firmware BR_g8.10_1.11(WVK.0)b46.
What capabilities could exploitation provide?
Successful exploitation allows an authenticated user to execute arbitrary operating-system commands by injecting commands through concatenated parameters in ping diagnostics and similar functions.