Advantech WISE-6610 vulnerabilities
3 known CVE vulnerabilities in Advantech WISE-6610, translated and rated.
- CVE-2026-79698Critical
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in the nodered_lib_apply function of the Node-RED Library component. Manipulation of the argument act leads to command injection. The attack can be launched remotely and the exploit is publicly available. The vendor released a fix in version 1.2.4_20260821.
- CVE-2026-79697Critical
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in the basicstation_apply function of the Basic Station Certificate-Deletion Handler component. Manipulation of the argument act causes command injection. The attack can be initiated remotely and the exploit is publicly disclosed. The vendor released a fix in version 1.2.4_20260821.
- CVE-2026-2670High
A vulnerability was identified in Advantech WISE-6610 devices (multiple models) version 1.2.1_20251110 in an unknown function of the file /cgi-bin/luci/admin/openvpn_apply in the Background Management component. Manipulation of the argument delete_file leads to OS command injection. The attack can be executed remotely and the exploit is publicly available. The vendor released a fix in version 1.2.4_20260821.