CVE-2026-36827

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-19 · updated 2026-07-24
Weakness: CWE-78

Description

A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7. The web management interface invokes the backend helper /usr/sbin/pappiw and passes user-controlled parameters to it. The helper performs unsafe argument processing using eval, which allows command injection when attacker-controlled input is included in the arguments. As a result, an authenticated remote attacker with access to the management interface may execute arbitrary shell commands.

References

https://secreu.notion.site/CVE-2026-36827-3652c0ab46158036a888ef4a12b104bf
https://www.panabit.com/
https://secreu.notion.site/CVE-2026-36827-3652c0ab46158036a888ef4a12b104bf

Get alerted when CVE-2026-36827 or the next vulnerability affects your stack