CVE-2026-73166

The web management interface of Advantech EKI-1242IEIMS firmware version V1.06.01 is vulnerable to a code injection flaw, enabling remote authenticated attackers to execute arbitrary code, including OS commands with root privileges. This high-severity vulnerability poses significant risks to the integrity and security of the device, making it critical for organizations using this firmware to prioritize immediate remediation. Users of affected products should assess their exposure and apply necessary patches or mitigations without delay.