[Linux expoit] - CVE-2026-31431

Maverick87 · April 30

Hello everyone,
I recently came to know this new CVE: https://copy.fail

Some of devices are affected by this?
I have the USG Flex 200HP firewall and NWA130BE wireless. Are these devices affected by this bug by any chance?

Thank you

Zyxel_MarkV · May 1

This CVE matters mainly for:

Because:

It needs a local unprivileged user to run code

Your firewall/AP:
Don’t expose that attack surface
Don’t allow arbitrary user code execution

You are at risk if you have something like this behind the firewall:

GiuseppeR · May 1

That’s a really interesting question.

I know that this bug is an LPE then it can escalate priviledges, so it has to be launched via SSH with a local access to that. Also a standard user.

Anyway with a RCE exposed on web services it could bypass the rest of the process without touching the firewall/AP.

I’ll follow this thread, that’s nice

Zyxel_MarkV · May 1

This CVE matters mainly for:

Because:

It needs a local unprivileged user to run code

Your firewall/AP:
Don’t expose that attack surface
Don’t allow arbitrary user code execution

You are at risk if you have something like this behind the firewall:

Accepted Solution