CVE-2026-36698 | Xovis APS-B/APS-R/APS-R-POE/APS-R-POE-PP/APS-R-POE-USB up to 2.10.1.1 Parameter Archive Processing /sbin/ImportParamSet.sh os command injection

October 26, 2026 Yanac

A vulnerability categorized as very critical has been discovered in Xovis APS-B, APS-R, APS-R-POE, APS-R-POE-PP and APS-R-POE-USB up to 2.10.1.1. This vulnerability affects unknown code of the file /sbin/ImportParamSet.sh of the component Parameter Archive Processing. The manipulation results in os command injection.

This vulnerability is reported as CVE-2026-36698. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More