CVE-2026-22313

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The device features a webserver that exposes a REST API authenticated via a token on the management network. An authenticated attacker can exploit an OS command injection—a flaw allowing the execution of arbitrary operating system commands—to send commands to the device that are executed with administrative permissions by the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.