CVE-2026-58147: Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers
WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the httppasswdhidden and httppasswdConfirmhidden parameters, allowing an authenticated attacker to execute arbitrary commands on the underlying operating system with root privileges.This issue has been fixed in firmware version 1.1.0.651412
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WNC T-Mobile 5G Box IDU router (portal.cgi)to a version that resolves this vulnerability.Fixed in 1.1.0.651412
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to the router's management portal. Successful exploitation allows arbitrary operating-system commands to run with root privileges.
Which router firmware is affected?
The issue is fixed in firmware version 1.1.0.651412. The provided information does not identify the full range of vulnerable firmware versions.
What should administrators do?
Update affected T-Mobile 5G Box IDU routers to firmware version 1.1.0.651412. If updating cannot be performed immediately, restrict access to the router management portal to trusted authenticated users.