CVE-2026-5416
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk67th percentile — higher than 67% of all known CVEs
Summary
Due to the improper neutralization of special elements used in a name parameter, a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing remote attackers to gain control over the system.
Recommendation
It is recommended to update the Ethernet switch software and implement appropriate security measures to minimize the risk of attack.
Original NVD description (English source)
Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.