CVE-2024-55026
Critical · 9.8CVSS
9.8
EPSS
0.4%
Published
Mar 3, 2026
CISA due date
—
The record
An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a crafted GET request.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19051 Plaintext storage of a password vulnerability in Menulux Software Inc. CWE-256
- CVE-2026-15933 OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. CWE-256
- CVE-2021-38489 HDD password plaintext is stored in a UEFI variable. CWE-256
- CVE-2026-55164 Lemur manages TLS certificate creation. CWE-256
- CVE-2026-14867 Credentials of built-in users are insecurely stored in the User directory of PcVue… CWE-256
- CVE-2026-57302 Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml… CWE-256
- CVE-2026-50268 Steeltoe is an open source project that provides a collection of libraries that helps… CWE-256
- CVE-2024-39575 update_disk_psu_baseline.sh requires password in plain text CWE-256