CVE-2026-44879

Authenticated Command Injection allows arbitrary command execution in CLI Interface

High · published July 21, 2026

CVSS v3.1
7.2
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01451 · 73.2th percentile
Published
2026-07-21T20:42Z
EPSS history
Timeline
  • 21 JUL 20:42Z
    Authenticated Command Injection allows arbitrary command execution in CLI Interface
    cvelistv5