CVE-2026-40852: CVE-2026-40852: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

Özet bilgiler

CVSS v3.1

7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,37 (yüzdelik 31)

CWE

CWE-78

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.certvde.com
• CWE-78