CVE-2016-6277

CVE-2016-6277 is a critical command injection vulnerability affecting multiple NETGEAR router models, including the R6250, R6400, R7000, and others. This flaw allows remote attackers to execute arbitrary commands by injecting shell metacharacters into the path information of the cgi-bin directory. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of the affected device. This CVE is actively exploited in the wild, as confirmed by its presence in the KEV catalog and numerous exploit intelligence sources like Metasploit and ExploitDB. The high EPSS score, extensive community discussion, and media coverage underscore its significant risk and widespread attention.