Filtered by vendor Weidmueller Subscriptions
Filtered by product Fwr Ie Sr 2tx Wl Subscriptions

Search

Switch to Advanced Search (Beta)
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-63586 1 Weidmueller 2 Fwr Ie Sr 2tx Wl, Fwr Ie Sr 2tx Wl 4g Eu Us 2026-08-25 9.8 Critical
The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system() function. By submitting a specially crafted username containing shell metacharacters, an unauthenticated attacker with network access to the device can escape the command context and execute arbitrary commands with root privileges.