CVE-2026-40852
HighSummary
A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to a system execute leading to code execution.
Risk Assessment
This can result in a total loss of confidentiality, integrity and availability for the organization.
Recommendation
It is recommended to implement additional validation checks on configuration values and to monitor access to the config generator.
Original NVD description (English source)
A highly authenticated attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.