Live › vulnerability › CVE-2026-105978
Improper input validation in management control functions lets a remote attacker with high privileges inject operating system commands. The injected commands run with root privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 09:19 UTC. All times on this page are UTC.
The CNA is CERT@VDE (industrial/OT vendors), but no public source read so far names the product or versions. VulDB labels the product 'TK100', which is unconfirmed and not recorded as affected. Exploitation needs a remote attacker with high privileges (admin), so the risk is mainly where admin credentials are weak, shared or exposed. Teams that run industrial or embedded devices with a network-reachable management interface should watch for the vendor advisory.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper input validation in management control functions may allow a remote attacker with high privileges to inject operating system commands and execute them with root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-105978")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.