CyberRota Analysis
AI-GeneratedA critical command injection vulnerability exists in the JSON parsing function of the mail-report.sh script within Cobham SATCOM VSAT7090 Maritime Satellite Router, allowing remote attackers to manipulate sender/recipient arguments. This flaw poses a significant risk as it could lead to unauthorized command execution on affected devices. Organizations using this router should prioritize immediate remediation efforts to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.