CVE-2026-24699 Cisco CVE debrief

Who should care

System administrators and security professionals responsible for Cisco RV130, RV130W, and RV110W routers should be aware of this vulnerability and take immediate action to mitigate the risk. They should review system configurations, implement network access controls, and monitor system logs for suspicious activity.

Technical summary

The vulnerability is caused by improper sanitization of the lan_ipv6_prefixlen configuration parameter in the sub_34984() function of the 'rc' binary. This allows an authenticated remote attacker to execute arbitrary OS commands with root privileges. The affected products are Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The vulnerability has a CVSS score of 7.2 and a severity of HIGH.

Defensive priority

High

Recommended defensive actions

• Update firmware to a version that is not vulnerable
• Implement network access controls to restrict access to the affected systems
• Monitor system logs for suspicious activity
• Consider implementing compensating controls such as intrusion detection and prevention systems
• Review and update incident response plans to address potential exploitation
• Conduct a thorough review of system configurations and network architecture to identify potential vulnerabilities
• Implement a vulnerability management program to ensure timely patching and mitigation of vulnerabilities

Evidence notes

The CVE record was published on 2026-07-08T15:16:26.943Z and was last modified on 2026-07-10T17:50:43.990Z. The NVD entry is currently Analyzed. The vulnerability exists in the sub_34984() function of the 'rc' binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The lan_ipv6_prefixlen configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges. Evidence is limited to CVE and NVD details.

Official resources