CVE-2026-24517

CVE-2026-24517 affects XWEB Pro prior to 1.12.1. An authenticated user can exploit an OS command injection via the firmware update route to achieve remote code execution on affected systems. Root cause: input crafted in firmware update requests leads to command injection. Impact: remote code exec...