CVE-2026-27564
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Sep 16, 2026
Vendor
unknown
Description
A high-privileged remote attacker can exploit a command injection vulnerability in the /api/datastorage/data endpoint by sending a PUT request with admin credentials allowing execution of commands with root privileges on the device.