VYPR

IoT Cloud HMI Gateway

by Haiwell

CVEs (1)

  • CVE-2026-19188CriAug 14, 2026
    risk 0.65cvss 10.0epss

    A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input…