CVE-2026-75937

UNKNOWN

Description

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.

Timeline

Published:October 2nd, 2026 9:16 PM

Last modified:October 3rd, 2026 4:16 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

https://www.digi.com/resources/security

Source: NIST NVD · Data may lag official sources by up to one minute