CVE-2026-7865: Hidden Console Command
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument.
A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH console of Crestron devices may use to run underlying OS commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7865?
CVE-2026-7865 has a high severity rating due to its potential for command injection vulnerabilities.
How do I fix CVE-2026-7865?
To fix CVE-2026-7865, apply the latest firmware updates provided by Crestron for affected devices.
What types of devices are affected by CVE-2026-7865?
CVE-2026-7865 affects Crestron devices that utilize the vulnerable console command.
What are the potential exploits of CVE-2026-7865?
The potential exploits of CVE-2026-7865 include unauthorized command execution and system compromise.
Who discovered CVE-2026-7865?
CVE-2026-7865 was discovered by third-party researcher Eugene Lim.