CVE-2026-19535

Name of the Vulnerable Software and Affected Versions Advantech EKI-1242IEIMS version V1.06.01

Description The LuCI administrative web interface contains a Cross-Site Request Forgery (CSRF) flaw. This allows a remote unauthenticated attacker to execute unauthorized state-changing requests by leveraging the session of a logged-in administrator, which can lead to unauthorized access to privileged management functions. CSRF is a flaw where a malicious website causes a user's web browser to perform an unwanted action on a different website where the user is currently authenticated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.