CVE-2025-26320: Improper Neutralization of Special Elements used in an OS Command

t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...