OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-19535

HIGH · CVSS 8.6 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A Cross-Site Request Forgery (CSRF) vulnerability exists in the LuCI administrative web interface of Advantech EKI-1242IEIMS firmware version V1.06.01, allowing remote unauthenticated attackers to execute unauthorized actions as a logged-in administrator. This could lead to unauthorized access to critical management functions, posing a significant risk to system integrity. Organizations using this firmware should prioritize remediation to safeguard against potential exploitation.

CVE
CVE-2026-19535
Severity
HIGH
CVSS
8.6
EPSS
0.24%

Original NVD Description

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a logged-in administrator, enabling unauthorized access to privileged management functions.