CVE-2026-73167

Nozomi Networks Labs identified a CWE-78 OS Command Injection in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch (firmware V1.06.01 ). A remote authenticated attacker can execute arbitrary OS commands as root via crafted request parameters, yielding high imp...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94 Code Injection vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch, affecting firmware V1.06.01 . A remote authenticated attacker with high privileges can execute arbitrary code on the device, including O...

EUVD-2026-80733

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

CVE-2026-73166

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS...

CVE-2026-73165

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73165

Nozomi Networks Labs identified an OS command injection (CWE-78) vulnerability in the web management interface of the Advantech EKI-1242IEIMS industrial Ethernet switch running firmware V1.06.01 . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request...

EUVD-2026-80734

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73164

Advantech EKI-1242IEIMS (firmware V1.06.01 ) is affected by an OS command injection (CWE-78) vulnerability in its web management interface . A remote authenticated attacker can execute arbitrary OS commands as root by sending crafted request parameters. The CVSS 4.0 base score is 8.6 (HIGH) with ...

CVE-2026-73164

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73164

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

EUVD-2026-80735

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73163

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

EUVD-2026-80736

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

CVE-2026-73163

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary...

AZL-101697 CVE-2026-89948 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

CVE-2026-89951 batman-adv: fix stale receive device on merged fragments

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. When that fragment was received on a hard interface which is deleted...

EUVD-2026-80548

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix freeing of claims on meshif deletion When the mesh interface is getting deleted, then batadvbladelbackboneclaims via batadvblapurgebackbonegw could make sure that all claims gets removed. But this function is...

CVE-2026-89948

CVE-2026-89948 affects the batman-adv (B.A.T.M.A.N. advanced) module in the Linux kernel , specifically its BLA (Backbone Link Aggregation) subsystem. The root cause is a logic bug: when a mesh interface is deleted, batadv_bla_del_backbone_claims() is never actually executed because bat_priv->...

CVE-2026-89825 drm/panthor: fix firmware control interface bounds checks

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix firmware control interface bounds checks panthorinitcsiface and panthorinitcsgiface validate firmware control interface offsets with 32-bit arithmetic and the size of the host wrapper structures. The offsets are...