CVE-2026-79698
CriticalCVSS 9.9Summary
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in the nodered_lib_apply function of the Node-RED Library component. Manipulation of the argument act leads to command injection. The attack can be launched remotely and the exploit is publicly available. The vendor released a fix in version 1.2.4_20260821.
Risk Assessment
A remote attacker can inject and execute arbitrary system commands on the device, potentially leading to full compromise of the device and the network it is connected to.
Recommendation
Immediately update Advantech WISE-6610 devices to version 1.2.4_20260821 or later to remediate the vulnerability.
Other vulnerabilities in Advantech WISE-6610
See all- CVE-2026-79697Critical
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in the basicstation_apply function of the Basic Station Certificate-Deletion Handler component. Manipulation of the argument act causes command injection. The attack can be initiated remotely and the exploit is publicly disclosed. The vendor released a fix in version 1.2.4_20260821.
- CVE-2026-2670High
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in an unknown function of the file /cgi-bin/luci/admin/openvpn_apply in the Background Management component. Manipulation of the argument delete_file leads to OS command injection. The attack can be executed remotely and the exploit is publicly available. The vendor released a fix in version 1.2.4_20260821.
Original NVD description (English source)
A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This vulnerability affects the function nodered_lib_apply of the component Node-RED Library. Such manipulation of the argument act leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.2.4_20260821 is able to resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.