OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-73167

HIGH · CVSS 8.6 EPSS 1.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability in the web management interface of Advantech EKI-1242IEIMS allows remote authenticated attackers to execute arbitrary OS commands with root privileges through specially crafted request parameters. This poses a significant risk as it can lead to unauthorized access and control over the affected devices. Organizations using this firmware version should prioritize remediation to mitigate potential exploitation.

CVE
CVE-2026-73167
Severity
HIGH
CVSS
8.6
EPSS
1.18%

Original NVD Description

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.