CVE-2026-2562
Published: 16 February 2026
Description
A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533. This impacts the function cast_streen of the file /jdcapi of the component jdcweb_rpc. Executing a manipulation of the argument File can lead to Remote Privilege Escalation. The…
more
attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Mitigating Controls (NIST 800-53 r5)AI
Requires timely remediation of flaws like CVE-2026-2562 in JD Cloud Box firmware to eliminate the remote privilege escalation vulnerability.
Enforces least privilege to restrict escalation from low-privilege remote access via the vulnerable cast_streen function manipulating the File argument.
Mandates input validation for arguments like File in the jdcweb_rpc component to block manipulations leading to privilege escalation.
Security SummaryAI
CVE-2026-2562 is a vulnerability in JingDong JD Cloud Box AX6600 firmware versions up to 4.5.1.r4533. It affects the cast_streen function within the /jdcapi file of the jdcweb_rpc component, where manipulation of the File argument enables remote privilege escalation.
The vulnerability can be exploited remotely by an attacker with low privileges over the network, requiring low attack complexity and no user interaction. Successful exploitation leads to limited impacts on confidentiality, integrity, and availability, as scored at CVSS 6.3 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). It is linked to CWE-266 (Incorrect Privilege Assignment) and CWE-269 (Improper Privilege Management).
Advisories indicate the exploit has been publicly disclosed and is available for use, with details at https://my.feishu.cn/wiki/Umb6w4PasizunKkagYschZP1nff, https://vuldb.com/?ctiid.346169, https://vuldb.com/?id.346169, and https://vuldb.com/?submit.750986. The vendor was contacted early regarding disclosure but provided no response, patches, or mitigations.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability enables remote privilege escalation via manipulation of the File argument in the jdcweb_rpc component, directly facilitating Exploitation for Privilege Escalation (T1068).