CVE-2024-53940: Victure RX1800 Firmware

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

An issue was discovered in Victure RX1800 WiFi 6 Router (software EN_V1.0.0_r12_110933, hardware 1.0) devices. Certain /cgi-bin/luci/admin endpoints are vulnerable to command injection. Attackers can exploit this by sending crafted payloads through parameters intended for the ping utility, enabling arbitrary command execution with root-level permissions on the device.

Affected products

• Victure RX1800 Firmware

Published 2024-12-02. Last modified 2026-06-17.