一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月17日

CVE-2026-73166 – Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code (‘Code In

未分类
📑 文章目录

Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code (‘Code Injection’) vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary code on the device, including OS commands as root.