rv130w firmware vulnerabilities and fixes

Recent CVEs affecting rv130w firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: rv130wfirmware.

rv130w firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-07-08. Highest priority: CVE-2026-24700 (score 50/100).

• CVE-2026-24697 HIGH 7.2 MITIGATE MITIGATE An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130
• CVE-2026-24698 HIGH 7.2 MITIGATE MITIGATE An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Ci
• CVE-2026-24699 HIGH 7.2 MITIGATE MITIGATE An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV1
• CVE-2026-24700 HIGH 7.2 MITIGATE MITIGATE An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV

FAQ

How do I fix rv130w firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rv130w firmware being exploited right now?

None of the tracked rv130w firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rv130w firmware CVE should I patch first?

CVE-2026-24700 currently ranks highest (50/100): An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV.

RSS feed for rv130w firmware · ← Back to latest CVEs