CVE-2026-40412

Name of the Vulnerable Software and Affected Versions Azure Orbital Spatio (affected versions not specified)

Description Unrestricted upload of files with dangerous types allows an unauthorized attacker to execute code over a network. This issue enables unauthenticated Remote Code Execution (RCE), which is the ability to execute arbitrary commands on a target machine from a remote location.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.