High · published July 14, 2026
CVSS calls it high at 7.2. It is confirmed in active exploitation. It sits in the 96.1th percentile for exploit probability.
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.