CVE-2026-35018

Name of the Vulnerable Software and Affected Versions NetComm NF20MESH versions prior to R6B032

Description Authenticated attackers can execute arbitrary commands as root by injecting shell metacharacters into the username JSON parameter. This occurs because the dalStorage addUserAccount() function unsafely concatenates user-supplied input into a shell command string passed to rut doSystemAction() without proper sanitization, leading to full root-level command execution on the operating system.

Recommendations Update NetComm NF20MESH to a version newer than R6B031. As a temporary mitigation, restrict access to the functionality that utilizes the dalStorage addUserAccount() function.