Critical severity9.1NVD Advisory· Published Sep 15, 2026

CVE-2026-90847

Description

A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Iptime/C200Ellm-create
Range: = 1.094

Patches

Vulnerability mechanics

References

drive.google.com/file/d/19WVo2tOImpmSEg3dFsmyB5Rw1aMQXyyd/viewnvd
vuldb.com/cve/CVE-2026-90847nvd
vuldb.com/submit/925831nvd
vuldb.com/vuln/403400nvd
vuldb.com/vuln/403400/ctinvd
youtu.be/qdFGRSpCiY0nvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000