CVE-2023-26320

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-263219.8A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by CVE-2023-263229.8A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic beingCVE-2023-263239.8A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploCVE-2023-263249.8A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic beingCVE-2023-263258.8The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterValCVE-2023-263269.8The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthentCVE-2023-263277.8Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mCVE-2023-263287.8Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code executiCVE-2023-263297.8Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mCVE-2023-26334.3Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potentialCVE-2023-263307.8Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code executiCVE-2023-263317.8Adobe Dimension versions 3.4.7 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m