CVE-2023-26315

CVE-2023-26315 is a post-authentication command injection vulnerability affecting Xiaomi AX9000 routers, stemming from insufficient input filtering. This flaw allows an authenticated attacker to achieve root access to the device. With a CVSS score of 8.8 (High), it presents a significant risk, enabling complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there's no evidence of active exploitation or community discussion, the high EPSS and FAUCET Risk Score indicate a substantial potential for future exploitation.