CVE-2026-83772

Name of the Vulnerable Software and Affected Versions Cobham SATCOM VSAT7090 Maritime Satellite Router versions prior to 20260704

Description Command injection is possible via remote attack in the JSON Parsing component. The issue exists within the c set reports decode() function of the mail-report.sh file, where improper manipulation of the sender/recipients argument allows for the execution of arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the c set reports decode() function to minimize the risk of exploitation.