CVE-2026-84059 | ICP DAS UA-2200/UA-5200 up to 20260704 /CGI?RestApi=SetHostname ArmAngstromInstructionSet ParameterArray command injection

September 1, 2026 Yanac

A vulnerability, which was classified as critical, was found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection.

This vulnerability is handled as CVE-2026-84059. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More