Remote Code Execution Vulnerability in Rooxis RXR-12 Wi-Fi Router

CVE-2026-126720

What is CVE-2026-126720?

The Rooxis RXR-12 Wi-Fi router has a serious vulnerability that allows unauthenticated remote code execution. This occurs in the /usr/bin/cloud_manage script, where an attacker can exploit a JSON field to execute arbitrary commands as root. This is particularly dangerous as it can be triggered over cleartext HTTP if the attacker has access to the hard-coded cloud endpoint. Users are advised to update their firmware to 20260813_c2169ea5 through the local web interface to safeguard against this vulnerability.

References