Vendor
Corget GpsDget 2_3.2 is vulnerable to unauthenticated OS command injection via the HTTP SendEmail method, allowing root-level code execution.