High severityNVD Advisory· Published May 5, 2026· Updated May 7, 2026
CVE-2026-7865
CVE-2026-7865
Description
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument.
A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH console of Crestron devices may use to run underlying OS commands.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.