CVE-2026-80150

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.3 SLC9000 versions prior to 9.7.0.2 EMG8500/EMG7500 versions prior to 9.7.0.1 SLB882 (affected versions not specified)

Description A server-side request forgery (SSRF) issue exists in the WebSSH/WebTelnet listener. This allows unauthenticated attackers to force the device to establish Telnet connections to arbitrary endpoints. The custom shellinaboxd uses the rooturl parameter from the web connection to determine its own IP address; by manipulating this parameter, an attacker can redirect the Telnet terminal connection to a host or IP under their control. This capability can be used to enumerate or communicate with internal network endpoints that are otherwise inaccessible.

Recommendations Update SLC8000 to firmware version 9.7.0.3 or later. Update SLC9000 to firmware version 9.7.0.2 or later. Update EMG8500/EMG7500 to firmware version 9.7.0.1 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for SLB882.