CVE-2023-26866: Greenpacket Ot-235 Firmware

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete takeover.

Affected products

• Greenpacket Ot-235 Firmware: version m-idu-1.6.0.3_v1.1 only; version mh-46360-2.0.3-r5-gp only
• Greenpacket Wr-1200 Firmware: version m-idu-1.6.0.3_v1.1 only

Published 2023-04-04. Last modified 2026-06-17.