CVE-2026-82794
HighCVSS 8.8Summary
SolarView Compact contains an OS command injection vulnerability in Schedule Settings. An attacker who can log in to the product may execute arbitrary OS commands.
Risk Assessment
An authenticated attacker can execute arbitrary operating system commands on the device, potentially leading to full compromise. The risk affects SolarView Compact devices with access to Schedule Settings.
Recommendation
Restrict management interface access to trusted networks and change default credentials. Check for vendor updates and apply them promptly.
Other vulnerabilities in SolarView Compact
See all- CVE-2026-82796Medium
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
- CVE-2026-82795Medium
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.
Original NVD description (English source)
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.