CVE Catalog
CVE-2026-7849
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.42%
35th percentile - higher than 35% of all known CVEs
Summary
Due to improper neutralization of special elements, an unauthenticated remote attacker can inject a command into the system configuration, which is then executed as root.
Risk Assessment
An attacker can gain full control of the system by executing arbitrary commands with root privileges.
Recommendation
Apply the vendor patch that properly neutralizes special elements in the system configuration.
Original NVD description (English source)
Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subsequently executed as root.