CVE-2025-26320

The t0mer BroadlinkManager version 5.9.1 is vulnerable to an OS command injection vulnerability. The root cause is the improper neutralization of special elements used in an OS command, specifically within the IP Address parameter at the /device/ping API endpoint. An attacker could potentially ex...