VYPR

D606-6

by Qihoo 360

CVEs (2)

  • CVE-2026-121607CriNov 4, 2026
    risk 0.65cvss 10.0epss —

    A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command of the file /fs2/bin/iscm. Performing a manipulation of the argument host results in os command injection. The attack may be initiated remotely. The…

  • CVE-2026-121608HigNov 4, 2026
    risk 0.47cvss 7.3epss —

    A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. This vulnerability affects the function on_push_message of the file /fs2/bin/iscm of the component Timezone Push Handler. Executing a manipulation of the argument tz can lead to os command…