CVE-2025-26856

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in UD-LT2 firmware Ver.1.00.008SE and earlier. If an attacker logs in to the affected product with an administrative account and manipulates requests for a certain screen operation, an arbitrary ...

CVE-2025-26856

CVE-2025-26856 affects I-O Data UD-LT2 firmware (Ver. 1.00.008_SE and earlier). The issue is OS Command Injection caused by improper neutralization of a special element during a specific screen operation, allowing an administrator to trigger arbitrary OS commands after authenticating with admin c...

CVE-2025-26856

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in UD-LT2 firmware Ver.1.00.008SE and earlier. If an attacker logs in to the affected product with an administrative account and manipulates requests for a certain screen operation, an arbitrary ...