CVE-2022-25916: MT7688-Wiscan Project MT7688-Wiscan

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitization in the 'wiscan.scan' function.

Affected products

• MT7688-Wiscan Project MT7688-Wiscan: before 0.8.3 (fixed in 0.8.3)

Published 2023-02-01. Last modified 2026-06-17.