CVE-2026-73176

Nozomi Networks Labs identified an OS Command Injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parame...

EUVD-2026-80698

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73167

Nozomi Networks Labs identified a CWE-78 OS Command Injection in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch (firmware V1.06.01 ). A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters, yielding high imp...

EUVD-2026-80732

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch, affecting firmware V1.06.01 . A remote authenticated attacker with high privileges can execute arbitrary code on the device, including O...

EUVD-2026-80733

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

EUVD-2026-80734

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73165

Nozomi Networks Labs identified an OS command injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request...

EUVD-2026-80735

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73164

Advantech EKI-1242IEIMS (firmware V1.06.01 ) is affected by an OS command injection (CWE-78) vulnerability in its web management interface . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request parameters. The CVSS 4.0 base score is 8.6 (HIGH) with ...

CVE-2026-73163

Nozomi Networks Labs identified an OS Command Injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch, firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root by supplying crafted request para...

EUVD-2026-80736

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-19535

Nozomi Networks Labs identified a CWE-352 (Cross-Site Request Forgery) vulnerability in the LuCI administrative web interface of the Advantech EKI-1242IEIMS industrial Ethernet switch (firmware V1.06.01 ). A remote, unauthenticated attacker can perform unauthorized state-changing requests on beha...

EUVD-2026-80737

Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery CSRF vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote unauthenticated attacker to perform unauthorized state-changing requests on behalf of a...