CVE-2022-26147: Quectel RG502Q-Ea Firmware

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.

Affected products

• Quectel RG502Q-Ea Firmware: before 2022-02-23 (fixed in 2022-02-23)

Published 2022-06-21. Last modified 2026-06-17.