WNC vulnerabilities
We track 6 vulnerabilities in WNC products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest WNC vulnerabilities
- 9.3 Critical severity
T-Mobile 5G Box IDU: Improper Neutralization of Special Elements used in an OS Command
WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password change functionality. The application improperly neutralizes special elements in the http_passwd_hidden and http_passwdConfirm_hidden parameter
- 9.4 Critical severity
T-Mobile 5G Box IDU: Improper Neutralization of Special Elements used in an OS Command
WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the cli_cookie POST parameter. The cli_cookie parameter value is directly concatenated in
- 8.4 High severity
T-Mobile 5G Box IDU: Cross-Site Request Forgery
WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. The anti-CSRF mechanism fails to validate the csrf_token_value parameter, accepting any arbitrary value as valid. This allows a remote attack
- 7.1 High severity
T-Mobile 5G Box IDU: Missing Authentication for Critical Functionality
WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the
- 9.3 Critical severity
T-Mobile 5G Box IDU: Improper Neutralization of Special Elements used in an OS Command
WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality within the /cgi-bin/portal.cgi endpoint, specifically affecting the ping_ip, ping_size, and ping_times POST parameters. The root cause is th
- 8.7 High severity
T-Mobile 5G Box IDU: Authentication Bypass by Spoofing
WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user. A