ThreatCluster

Multiple CVEs Enable Remote Command Execution on Vulnerable Routers and Servers

First seen 17 Aug 2026, 16:51 UTC •nvd.nist.gov •74% similarity •73

Article Content

Browse articles
ThreatCluster

Two critical vulnerabilities have been identified that allow remote attackers to execute arbitrary commands. CVE-2016-6277 affects various NETGEAR routers, including R6250, R6400, and R7000, allowing exploitation through shell metacharacters in the path info to cgi-bin. CVE-2007-3010 impacts Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier, enabling similar command execution via the user parameter during a ping action. Both vulnerabilities have been added to the CISA Known Exploited Vulnerabilities Catalog, indicating active exploitation. Users of the affected systems are advised to consult the CISA guidance for remediation steps. The vulnerabilities pose significant risks to network security and operational integrity.

Key Points: • CVE-2016-6277 affects multiple NETGEAR routers, allowing remote command execution. • CVE-2007-3010 impacts Alcatel OmniPCX servers, enabling similar exploitation methods. • Both vulnerabilities are actively exploited and listed in CISA's Known Exploited Vulnerabilities Catalog.

ThreatCluster AI How this analysis works

Timeline

2007-09-18
CVE-2007-3010 published
Alcatel OmniPCX servers were identified with a vulnerability allowing command execution during ping actions.
nvd.nist.gov
2016-12-14
CVE-2016-6277 published
NETGEAR routers were found vulnerable to remote command execution via cgi-bin exploitation.
nvd.nist.gov
2022-03-07
CVE-2016-6277 added to CISA KEV
CISA confirmed active exploitation of CVE-2016-6277 in the wild.
nvd.nist.gov
2022-04-15
CVE-2007-3010 added to CISA KEV
CISA reported active exploitation of CVE-2007-3010, urging immediate action.
nvd.nist.gov

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Alcatel OmniPCX Enterprise Communication Server