CVE-2026-82794
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
SolarView Compact contains an OS command injection vulnerability in Schedule Settings. An attacker who can log in to the product may execute arbitrary OS commands.
Risk Assessment
An authenticated attacker can execute arbitrary operating system commands on the device, potentially leading to full compromise. The risk affects SolarView Compact devices with access to Schedule Settings.
Recommendation
Restrict management interface access to trusted networks and change default credentials. Check for vendor updates and apply them promptly.
Other vulnerabilities in SolarView Compact
See all- CVE-2022-29303CriticalActively exploited
SolarView Compact version 6.00 was found to contain a command injection vulnerability via conf_mail.php. An attacker can exploit this to execute arbitrary system commands on the device.
- CVE-2026-82796Medium
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- CVE-2026-82795Medium
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Original NVD description (English source)
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS