All packages
Panabit PAP-XM320 vulnerabilities
3 known CVE vulnerabilities in Panabit PAP-XM320, translated and rated.
- CVE-2026-36829Critical
The embedded HTTP server in Panabit PAP-XM320 up to version 7.7 fails to validate session cookie values, allowing authentication bypass via directory traversal.
- CVE-2026-36828High
A command injection vulnerability in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to v7.7 allows authenticated users to execute arbitrary shell commands with root privileges via the action=runcmd parameter.
- CVE-2026-36827Medium
A command injection vulnerability in Panabit PAP-XM320 up to V7.7. The management interface calls /usr/sbin/pappiw with user-controlled parameters processed by eval, allowing arbitrary shell command execution.