CVE-2026-79698 | Advantech WISE-6610-NB 1.2.1_20251110 Node-RED Library nodered_lib_apply act command injection

A vulnerability categorized as very critical has been discovered in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This vulnerability affects the function nodered_lib_apply of the component Node-RED Library. Such manipulation of the argument act leads to command injection.

This vulnerability is uniquely identified as CVE-2026-79698. The attack can be launched remotely. Moreover, an exploit is present.

It is advisable to upgrade the affected component.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More