CVE-2026-18808: Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO

Q: Which KIO deployments are affected?

KIO (Klemsan Internet Objects) versions before 1.9 are affected. The provided information does not identify any configuration-specific exclusions.

Q: Does exploitation require authentication or user interaction?

No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the potential impact of successful exploitation?

Successful code injection can result in remote code execution. The reported CVSS metrics indicate high impact to confidentiality, integrity, and availability.

Published Sep 1, 2026

Updated

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection.

This issue affects KIO (Klemsan Internet Objects): before v1.9.

Affected Software

1 affected component

KIO (Klemsan Internet Objects)<1.9

Event History

Sep 1, 2026

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which KIO deployments are affected?

KIO (Klemsan Internet Objects) versions before 1.9 are affected. The provided information does not identify any configuration-specific exclusions.

Does exploitation require authentication or user interaction?

No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the potential impact of successful exploitation?

Successful code injection can result in remote code execution. The reported CVSS metrics indicate high impact to confidentiality, integrity, and availability.

CVE-2026-18808: Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO

Affected Software

Event History

Frequently Asked Questions

Which KIO deployments are affected?

Does exploitation require authentication or user interaction?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which KIO deployments are affected?

Does exploitation require authentication or user interaction?

What is the potential impact of successful exploitation?