CVE-2026-30603 | Qianniao QN-L23PA0904 20250721.1640 Firmware Update iu.sh backdoor

A vulnerability was found in Qianniao QN-L23PA0904 20250721.1640. It has been declared as critical. This affects an unknown function of the file iu.sh of the component Firmware Update Handler. Executing a manipulation can lead to backdoor.

The identification of this vulnerability is CVE-2026-30603. The physical device can be targeted for the attack. There is no exploit available.