CVE-2026-30603
MEDIUM
NVD
CVSS Score
6.8
Severity
MEDIUM
Published
Apr 02, 2026
Vendor
unknown
Description
An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a crafted iu.sh script contained in an SD card.