CVE-2017-2866: Meetcircle Circle With Disney Firmware

High severity, CVSS 8.8. EPSS: 3.1% chance of exploitation in the next 30 days.

An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.

Affected products

• Meetcircle Circle With Disney Firmware: version 2.0.1 only

Published 2017-11-07. Last modified 2026-06-17.