CVE-2026-27560
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Sep 16, 2026
Vendor
unknown
Description
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/status/data endpoint by sending a crafted DELETE request with admin credentials allowing execution of commands with root privileges on the device.