Critical OS Command Injection Vulnerability in Linksys WRT54GL

## Overview Linksys WRT54GL version 4.30.18 has a critical vulnerability identified as CVE-2026-121930. This flaw resides in the Ping Diagnostic component, specifically within the apply.cgi file. Attackers can exploit this weakness to execute OS commands remotely. ## Technical Details The vulnerability occurs due to improper handling of the ping_ip argument in the system function of apply.cgi. By manipulating this argument, an attacker can inject arbitrary OS commands. The exploit is publicly available, increasing the risk of attacks against vulnerable devices. This issue affects devices that are no longer supported, meaning no official patches or updates will be provided by the vendor. ## Impact Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the device's operating system. This could lead to a range of malicious activities, including data theft, network compromise, and further attacks on connected systems. Given the critical CVSS score of 8.5, the potential impact is severe for any organization still using this router model. ## Mitigation Defenders should take immediate action to protect their networks. If possible, upgrade to a newer, supported router model. If replacement is not feasible, consider isolating the affected device from the network to limit exposure. Regularly monitor network traffic for any unusual activity that may indicate exploitation attempts. Additionally, review firewall rules to block unauthorized access to the router.