CVE-2026-82766
HighCVSS 8.8Summary
An OS Command Injection issue exists in SGA1000 due to improper neutralization of special elements. An attacker who can log in to the product may execute arbitrary OS commands.
Risk Assessment
This vulnerability allows an authenticated attacker to execute arbitrary OS commands, potentially resulting in full control over the device.
Recommendation
Update SGA1000 to a patched version and enforce least privilege for accounts that can log in to the product.
Other vulnerabilities in SGA1000
See all- CVE-2026-82768High
A path traversal vulnerability exists in SGA1000. An attacker with FTP access to the product may view and/or alter arbitrary files on the server.
- CVE-2026-82767Medium
A cross-site scripting vulnerability exists in SGA1000. If exploited, an arbitrary script may be executed in a logged-in user's web browser.
Original NVD description (English source)
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.