CVE-2024-54806

9.8 criticalEPSS 1.1%

Critical (9.8) in netgear wnr854t firmware. EPSS 1.1% chance of exploitation in the next 30 days.

Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2025-03-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netgear:wnr854t_firmware

References

https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#806

Check your stack JSON