Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) — CVE-2026-58457 (Critical)

Date Jul 1, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Shenzhen · Aitemi M300 Wi-Fi Repeater (hardware model MT02)

CVE CVE-2026-58457

Critical vendor advisory CVE-2026-58457

Summary

Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passed without sanitization into sprintf() to build uci shell commands executed via doSystemCmdComlib(), granting full root-level control of the device.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.8) in Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). Patch or mitigate promptly.

Operator check

Review CVE-2026-58457 in your asset inventory. Apply patches per vendor guidance and verify Aitemi M300 Wi-Fi Repeater (hardware model MT02) is not exposed. CVSS score: 9.8.

Sources

NVD — CVE-2026-58457 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed