CVE-2026-40852

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A highly authenticated attacker can modify the configuration generator by injecting a payload into future configurations. The device fails to properly validate this configuration value before passing it to a system execution, leading to arbitrary code execution. This may result in a total loss of confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.