We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. The /web/um_fileName_set.cgi and /web/um_web_upgrade.cgi endpoints fail to properly sanitize the upgradeFileName parameter, allowing authenticated attackers to execute arbitrary OS commands on the device, resulting in remote code execution.
Reserved 2025-06-16 | Published 2025-07-15 | Updated 2025-07-15 | Assigner mitregithub.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits
github.com/...0-exploits/blob/main/CVE-2025-52379/writeup.md
Support options
