Critical severity9.8NVD Advisory· Published Sep 4, 2026

CVE-2026-44402

Description

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a malicious tar archive containing arbitrary executable files that are extracted to a privileged directory and executed as root, achieving full system compromise.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Virgula0/CVE-2026-44402llm-create
Range: 1.1
Voltronic Power/SNMP Web Prollm-fuzzy
Range: 1.1

Patches

Vulnerability mechanics

References

voltronicpower.comnvd
www.vulncheck.com/advisories/voltronic-power-snmp-web-pro-unauthenticated-rce-via-upload-cginvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000