Vulnerability · Published Jul 1, 2026 · Assigned by VulnCheck

CVE-2026-58457Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

Critical 9.8

In plain English

A critical-severity OS command injection in M300 Wi-Fi Repeater from Shenzhen Aitemi E Commerce Co. Ltd.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.9%top 12.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passed without sanitization into sprintf() to build uci shell commands executed via doSystemCmdComlib(), granting full root-level control of the device.

Affected products (as reported)

Vendor	Product	Versions
Shenzhen Aitemi E Commerce Co. Ltd.	M300 Wi-Fi Repeater	*

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Researcher Disclosure technical-description, exploit
Product Webpage product
https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-mt02-unauthenticated-os-command-injection-via-protocol-csp third-party-advisory