CVE-2026-20761

🗓️ 20 Feb 2026 15:32:09Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 4 Views

CVE-2026-20761 enables command execution in EnOcean SmartServer IoT before 4.60.009 via LON IP-852.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-20761	20 Feb 202615:32	–	attackerkb
Circl	CVE-2026-20761	19 Feb 202611:00	–	circl
CNNVD	EnOcean SmartServer IoT 命令注入漏洞	20 Feb 202600:00	–	cnnvd
Cvelist	CVE-2026-20761 EnOcean SmartServer IoT Command Injection	20 Feb 202615:32	–	cvelist
NVD	CVE-2026-20761	20 Feb 202616:22	–	nvd
Positive Technologies	PT-2026-21021	20 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-20761	21 Feb 202619:29	–	redhatcve
The Hacker News	⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More	4 May 202614:23	–	thn
Vulnrichment	CVE-2026-20761 EnOcean SmartServer IoT Command Injection	20 Feb 202615:32	–	vulnrichment

Vulners

Node

enocean_edge_inc smartserver_iotRange≤4.60.009

[
  {
    "defaultStatus": "unaffected",
    "product": "SmartServer IoT",
    "vendor": "EnOcean Edge Inc",
    "versions": [
      {
        "lessThanOrEqual": "4.60.009",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "4.60.023"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-050-01
enoceanwiki	www.enoceanwiki.atlassian.net/wiki/spaces/DrftSSIoT/pages/1475410/SmartServer+IoT+Release+Notes
enoceanwiki	www.enoceanwiki.atlassian.net/wiki/spaces/IEC/pages/288063529/Enhancing+Security
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-01.json

15 Apr 2026 00:35Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.1

EPSS0.0038

SSVC

CWE-77