<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>WRT54GL (4.30.18) - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/products/wrt54gl-4.30.18/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Wed, 04 Nov 2026 21:13:03 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/products/wrt54gl-4.30.18/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>Linksys WRT54GL: Traceroute diagnostic remote command injection (CVE-2026-121931)</title><link>https://feed.craftedsignal.io/briefs/2026-11-linksys-cve-2026-121931/</link><pubDate>Wed, 04 Nov 2026 21:13:03 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-11-linksys-cve-2026-121931/</guid><description>A security vulnerability in the Traceroute Diagnostic Function of the Linksys WRT54GL (4.30.18) allows for remote OS command injection via the traceroute_ip argument.</description><content:encoded>&lt;p>A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Manipulation of the argument traceroute_ip leads to OS command injection. The attack can be launched remotely. The exploit has been disclosed publicly. The vendor was contacted but did not respond. This vulnerability only affects products that are no longer supported.&lt;/p>
</content:encoded><category domain="severity">critical</category><category domain="type">advisory</category></item></channel></rss>