CVE-2026-101107: Command Injection

Published Nov 12, 2026

Updated

An OS command Injection issue exists in Air Terminal 6 provided by SoftBank Corp. Arbitrary commands may be executed with the root privilege by a user who can log in to the web management console of the affected product.

Event History

Nov 12, 2026

CVE Published

via MITRE·05:10 AM

Data Sourced

via MITRE·05:10 AM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

An attacker must be able to log in to the affected product's web management console. The issue does not describe exploitation by an unauthenticated user.

What level of access can successful exploitation provide?

A successful attacker can execute arbitrary operating-system commands with root privileges, allowing full compromise of the affected device.

CVE-2026-101107: Command Injection

Event History

Frequently Asked Questions

Who can exploit this issue?

What level of access can successful exploitation provide?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What level of access can successful exploitation provide?