CVE-2026-27562
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Sep 16, 2026
Vendor
unknown
Description
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/iodd/config endpoint by sending a crafted PUT request with admin credentials allowing execution of commands with root privileges on the device.