CVE-2026-78802

Summary

A remote code execution vulnerability exists in the SKYWORTH WR6640X router firmware that allows attackers to execute arbitrary code on the device without authentication. This critical flaw enables full system compromise from an external network position.

Exploitability

The exploit is highly practical with no authentication required, allowing immediate remote code execution against vulnerable devices.

Blast radius

The vulnerability affects all SKYWORTH WR6640X routers running firmware version 1.0.3, potentially exposing thousands of home and small office networks to complete takeover by remote attackers.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 2.590 or later immediately to remediate this critical RCE vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.