GHSA-q2pm-pcpj-8r24: ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the...

December 4, 2025 • Source: GitHub Global Advisories

ALLNET ALL-RUT22GW v3.3.8 has an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.