1day: Abusing custom CWMP XML parsing to achieve RCEJul 27, 2025 ·4 min read · iots1dayReverse-engineering a custom CWMP protocol implementation and chaining bugs to achieve RCE.