{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ameig_smart_technologyforge_slt711/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:meig_smart_technology:forge_slt711:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-36356"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FORGE_SLT711 (firmware MDM9607.LE.1.0-00110-STD.PROD-1)"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-36356","rce","command-injection","network-device"],"_cs_type":"advisory","_cs_vendors":["MeiG Smart Technology"],"content_html":"\u003cp\u003eCVE-2026-36356 is a critical vulnerability in the MeiG Smart FORGE_SLT711 4G LTE CPE router. The custom action handler for the GoAhead web server, specifically the '/action/SetRemoteAccessCfg' endpoint, fails to perform authentication and does not sanitize the 'password' parameter provided in JSON POST requests. This allows an unauthenticated attacker to inject shell commands into a 'system()' call executed with root privileges. Public exploit code is available.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote, unauthenticated attackers to gain a full root shell on affected CPE devices. The vulnerability facilitates persistent access, such as the deployment of a telnet backdoor, and full system control.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all internet-facing MeiG Smart FORGE_SLT711 devices.\u003c/li\u003e\n\u003cli\u003eRestrict access to the router's web management interface to trusted internal IP ranges or VPN-only access.\u003c/li\u003e\n\u003cli\u003eCoordinate with the vendor or service provider to verify if a firmware patch is available to address the unsafe 'sprintf' and 'system' implementation in the GoAhead handler.\u003c/li\u003e\n\u003cli\u003eDeploy detection rules to monitor for suspicious HTTP POST requests directed at the '/action/SetRemoteAccessCfg' endpoint.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T18:04:07Z","date_published":"2026-10-29T18:04:07Z","id":"https://feed.craftedsignal.io/briefs/2026-10-meig-forge-slt711-rce/","summary":"An unauthenticated OS command injection vulnerability in the MeiG Smart FORGE_SLT711 router allows remote attackers to execute arbitrary commands as root via the /action/SetRemoteAccessCfg endpoint.","title":"MeiG Smart FORGE_SLT711: Unauthenticated OS command injection (CVE-2026-36356)","url":"https://feed.craftedsignal.io/briefs/2026-10-meig-forge-slt711-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:meig_smart_technology:forge_slt711:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}