CVE-2026-105982: Command Injection in IPsec VPN

Published Nov 3, 2026

Updated

Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges.

Event History

Nov 3, 2026

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote attacker must already have high privileges in the affected IPsec VPN function. The vulnerability does not indicate that unauthenticated or low-privileged users can exploit it.

What is the impact of successful exploitation?

An attacker can inject system commands and have them execute with root privileges. This can result in complete compromise of the affected system's confidentiality, integrity, and availability.

Is user interaction required for exploitation?

No. The supplied severity vector indicates that user interaction is not required.

CVE-2026-105982: Command Injection in IPsec VPN

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Is user interaction required for exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the impact of successful exploitation?

Is user interaction required for exploitation?