Status: NEW | Advisory ID: CVE-2026-73163
| CVE | CVE-2026-73163 |
| CVSS Score / Version | 8.6 (High) / CVSS v4.0 |
| Updated | 2026-09-23 |
| Classified as | CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')) |
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-73163 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-73163 |