WWNC

Products

Exploited and recent CVEs

• CVE-2026-58147 Critical 9.3 Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers 1.6%
• CVE-2026-58146 Critical 9.4 Unauthorized remote code execution in T-Mobile 5G Box IDU routers 2.9%
• CVE-2026-40857 High 8.4 CSRF token bypass in T-Mobile 5G Box IDU routers 0.2%
• CVE-2026-40856 High 7.1 Config disclosure in T-Mobile 5G Box IDU routers 0.4%
• CVE-2026-40855 Critical 9.3 Command Injection in T-Mobile 5G Box IDU router via ping functionality 1.6%
• CVE-2026-40854 High 8.7 Session auth bypass via cookie value in T-Mobile 5G Box IDU routers 0.3%