CVE-2026-80217

HighCVSS 8.8

Published: 15/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

21th percentile - higher than 21% of all known CVEs

Summary

A hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands. It requires SSH login and enable mode access.

Risk Assessment

A user with SSH access and enable mode can execute arbitrary OS commands, potentially leading to full device compromise. It requires SSH login and enable mode privileges.

Recommendation

Restrict SSH access and enable mode to trusted administrators and apply the vendor fix when available. Monitor for unusual commands executed in enable mode.

Other vulnerabilities in FF-RFI079I4 and FF-RFI078I4

CVE-2026-77853High
An improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands. It requires access to the NETCONF interface.

Original NVD description (English source)

Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS