CVE-2026-80148

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.3 SLC9000 versions prior to 9.7.0.2 EMG8500/EMG7500 versions prior to 9.7.0.1 SLB882 (affected versions not specified)

Description A server-side request forgery issue exists in the WebSSH/WebTelnet listener. Unauthenticated attackers can force the device to establish SSH connections to arbitrary endpoints. This occurs because the custom shellinaboxd uses a snprintf call to build the SSH connection target with user-supplied input. By providing an overlong username string, an attacker can truncate the device IP suffix, redirecting the connection to a host under their control. This can be used to enumerate or communicate with internal network endpoints that are otherwise inaccessible.

Recommendations Update SLC8000 to firmware version 9.7.0.3 or later. Update SLC9000 to firmware version 9.7.0.2 or later. Update EMG8500/EMG7500 to firmware version 9.7.0.1 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for SLB882.