CVE-2026-52482
Deferred
Deferred - Pending Action
Remote Code Execution in SJRC F11 SJ-GPS-PRO Firmware
Vulnerability report for CVE-2026-52482, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-09
Last updated on: 2026-09-09
Assigner: MITRE
Description
Description
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| sjrc | sj-gps-pro | From 2019-09-17 (inc) |
| fullhan | fh8856 | * |
| busybox | busybox | 1.19.3 |
| linux | linux_kernel | 3.0.8 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |