CVE-2026-83524

Received Received - Intake

Command Injection in RedPort Optimizer wXa Series

Publication date: 2026-08-31

Last updated on: 2026-08-31

Assigner: VulDB

Description

A security vulnerability has been detected in RedPort Optimizer wXa-203, Optimizer wXa-213 and Optimizer wXa-223 up to 20260704. This impacts the function exec of the file /xgatev1/system/datetime.php of the component System Clock. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-31

Last Modified

2026-08-31

Generated

2026-09-01

AI Q&A

2026-09-01

EPSS Evaluated

N/A

NVD

CVE-2026-83524

EUVD

EUVD-2026-68912

Affected Vendors & Products

Vendor	Product	Version / Range
redport	optimizer	to 20260704 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-74	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a command injection flaw in RedPort Optimizer devices (wXa-203, wXa-213, wXa-223 up to 20260704). It exists in the system clock function of the file /xgatev1/system/datetime.php. An attacker can remotely execute arbitrary commands due to improper input validation.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable versions of RedPort Optimizer wXa-203, wXa-213, or wXa-223 up to 20260704. Inspect the file /xgatev1/system/datetime.php for command injection flaws. Use network scans to identify exposed systems running these versions.

Impact Analysis

An attacker could gain control of the device, execute malicious commands, steal data, or disrupt operations. Since the exploit is public, anyone with network access could potentially attack vulnerable systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR (data protection) and HIPAA (health information privacy). Organizations using affected devices may face compliance failures and legal penalties.

Mitigation Strategies

Immediately update RedPort Optimizer to the latest version if available. If no update exists, isolate affected systems from the network. Disable remote access to the /xgatev1/system/datetime.php component. Monitor network traffic for suspicious command execution attempts.

Hi! I’m here to help you understand CVE-2026-83524. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70