CVE-2026-73167 in EKI-1242EIMSinfo

Summary

by MITRE • 09/16/2026

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web management interface of Advantech EKI-1242IEIMS in firmware version V1.06.01 that allows a remote authenticated attacker to execute arbitrary OS commands as root via crafted request parameters.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

Nozomi

Reservation

08/11/2026

Disclosure

09/16/2026

Moderation

accepted

Entry

VDB-405890

CPE

ready

CWE

CWE-78 (confirmed)

CVSS

9.1 (VulDB)

EPSS

0.00000

KEV

Activities

very low

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-73167
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-73167
CVE Details	https://www.cvedetails.com/cve/CVE-2026-73167/

◂ Previous Overview Next ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!