CVE-2026-30603
Root Access via Crafted Firmware Update Script on Qianniao QN-L23PA0904
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card.
CVSS 3.1 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products