VULNERABILITY INTELLIGENCE
CVE-2026-22313
CVSS score9.1 CRITICAL
EPSS probability0.92%
CISA KEVNot currently listed
Published2026-06-16
Last modified2026-10-25
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability an authenticated attacker can send arbitrary commands to the device that are executed with administrative permissions by the underlying operating system.
Weakness classification
- a6d3dc9e-0591-4a13-bce7-0f5b31ff6158: CWE-78