CoreCVE
Back

HIGH

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root

Published Sep 16, 2026

Description

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Nozomi
Published Sep 16, 2026
Updated Sep 17, 2026
Reserved Aug 11, 2026
Link CVE-2026-73166
CISA Vulnrichment
Updated Sep 17, 2026
NVD
Status Awaiting Analysis
Modified Sep 17, 2026
Link CVE-2026-73166
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-73166