01 Record

CVE-2026-19771

Baicells EG3661M LuCI Web luci os command injection

HighPUBLISHEDCNA: VulDB

Base score8.6 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

02 Description

Baicells EG3661M LuCI Web luci os command injection

Published: 2026-08-14 01:45Z17 HR AGO
Last updated: 2026-08-14 01:45Z17 HR AGO
Reserved: 2026-08-13
Assigning CNA: VulDB
Record state: PUBLISHED
Severity: High (CVSS 8.6)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Weaknesses: CWE-77 CWE-78
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 3e1d94e6a9fe09b06842efcf1c46c62f750ade2ce5db4c0462d12b5f4b794acc

VendorProductVersionsPlatforms

BaicellsEG3661MBaiCE_BQ6_2.0.5.3_NA—

vuldb.comVDB-389685 | Baicells EG3661M LuCI Web luci os command injectionhttps://vuldb.com/vuln/389685vdb-entrytechnical-description
vuldb.comVDB-389685 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/389685/ctisignaturepermissions-required
vuldb.comCVE-2026-19771 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-19771third-party-advisory
vuldb.comSubmit #869362 | Baicells EG3661M (variant EG3661M-NR6 / PhotonID63M) BaiCE_BQ6_2.0.5.3_NA OS Command Injectionhttps://vuldb.com/submit/869362third-party-advisory
github.comhttps://github.com/actuator/cve/blob/main/Baicells/EG3661M.mdexploit