{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/wrt54gl-4.30.18/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:linksys:wrt54gl:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-121931"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WRT54GL (4.30.18)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Linksys"],"content_html":"\u003cp\u003eA security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Manipulation of the argument traceroute_ip leads to OS command injection. The attack can be launched remotely. The exploit has been disclosed publicly. The vendor was contacted but did not respond. This vulnerability only affects products that are no longer supported.\u003c/p\u003e\n","date_modified":"2026-11-04T21:13:03Z","date_published":"2026-11-04T21:13:03Z","id":"https://feed.craftedsignal.io/briefs/2026-11-linksys-cve-2026-121931/","summary":"A security vulnerability in the Traceroute Diagnostic Function of the Linksys WRT54GL (4.30.18) allows for remote OS command injection via the traceroute_ip argument.","title":"Linksys WRT54GL: Traceroute diagnostic remote command injection (CVE-2026-121931)","url":"https://feed.craftedsignal.io/briefs/2026-11-linksys-cve-2026-121931/"}],"language":"en","title":"CraftedSignal Threat Feed - WRT54GL (4.30.18)","version":"https://jsonfeed.org/version/1.1"}