CVE-2026-105978: OS Command Injection
Published Nov 3, 2026
·Updated
Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
Event History
Nov 3, 2026
CVE Published
via NVD·09:17 AM
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must already have high privileges and be able to access the management control functions remotely. No user interaction is required.
2
What is the potential impact of successful exploitation?
An attacker can inject and execute operating system commands with root privileges. This can result in complete compromise of the affected system's confidentiality, integrity, and availability.