{"id":"CVE-2026-79698","title":"A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WIS…","summary":"A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WIS…","severity":"critical","cvss":9.9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-74","CWE-77"],"vendor":"Advantech","product":"WISE-6610-NB","affected":["WISE-6610-NB 1.2.1_20251110","WISE-6610-EB 1.2.1_20251110","WISE-6610-TB 1.2.1_20251110","WISE-6610-JB 1.2.1_20251110","WISE-6610-CB 1.2.1_20251110","WISE-6610-EL-NB 1.2.1_20251110","WISE-6610-EL-EB 1.2.1_20251110","WISE-6610-EL-TB 1.2.1_20251110","WISE-6610-EL-JB 1.2.1_20251110","WISE-6610-EL-CB 1.2.1_20251110","WISE-6610P-DEA 1.2.1_20251110","WISE-6610P-DNA 1.2.1_20251110","WISE-6610P-DTA 1.2.1_20251110"],"published":"2026-09-07","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:17.030","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-79698","references":[{"url":"https://uvxbywu62qm.feishu.cn/wiki/RgziwoXf2iD9zKkI4MJcfWcNn7c?from=from_copylink","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-79698","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/879219","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399513","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399513/cti","label":"cna@vuldb.com"},{"url":"https://www.advantech.com/","label":"cna@vuldb.com"},{"url":"https://www.advantech.com/en-us/support/details/firmware?id=1-2K7AXRI","label":"cna@vuldb.com"},{"url":"https://www.advantech.com/zh-tw/security-advisory","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-11T20:15:46.440772Z"},"epss":0.017,"epssPercentile":0.76194,"ingestedAt":"2026-09-08T15:33:26.975Z","slug":"CVE-2026-79698","body":"## Overview\n\nA vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This vulnerability affects the function nodered_lib_apply of the component Node-RED Library. Such manipulation of the argument act leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.2.4_20260821 is able to resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":54.5,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[{"seq":201996,"id":"CVE-2026-79698","ts":1789399993836,"field":"exploit_available","old":"false","new":"true"},{"seq":200723,"id":"CVE-2026-79698","ts":1789397585862,"field":"exploit_available","old":"true","new":"false"},{"seq":199418,"id":"CVE-2026-79698","ts":1789395486641,"field":"exploit_available","old":"false","new":"true"},{"seq":198663,"id":"CVE-2026-79698","ts":1789392188510,"field":"exploit_available","old":"true","new":"false"},{"seq":196994,"id":"CVE-2026-79698","ts":1789384273694,"field":"exploit_available","old":"false","new":"true"},{"seq":196358,"id":"CVE-2026-79698","ts":1789383741080,"field":"exploit_available","old":"true","new":"false"},{"seq":195841,"id":"CVE-2026-79698","ts":1789380634631,"field":"exploit_available","old":"false","new":"true"},{"seq":194125,"id":"CVE-2026-79698","ts":1789378694356,"field":"exploit_available","old":"true","new":"false"},{"seq":192912,"id":"CVE-2026-79698","ts":1789376494916,"field":"exploit_available","old":"false","new":"true"},{"seq":191699,"id":"CVE-2026-79698","ts":1789373590703,"field":"exploit_available","old":"true","new":"false"},{"seq":190484,"id":"CVE-2026-79698","ts":1789369450147,"field":"exploit_available","old":"false","new":"true"},{"seq":189271,"id":"CVE-2026-79698","ts":1789368373778,"field":"exploit_available","old":"true","new":"false"},{"seq":188054,"id":"CVE-2026-79698","ts":1789365211982,"field":"exploit_available","old":"false","new":"true"},{"seq":186841,"id":"CVE-2026-79698","ts":1789363455264,"field":"exploit_available","old":"true","new":"false"},{"seq":185627,"id":"CVE-2026-79698","ts":1789361195717,"field":"exploit_available","old":"false","new":"true"},{"seq":184414,"id":"CVE-2026-79698","ts":1789358319255,"field":"exploit_available","old":"true","new":"false"},{"seq":182665,"id":"CVE-2026-79698","ts":1789354303053,"field":"exploit_available","old":"false","new":"true"},{"seq":181458,"id":"CVE-2026-79698","ts":1789353280390,"field":"exploit_available","old":"true","new":"false"},{"seq":180251,"id":"CVE-2026-79698","ts":1789350265901,"field":"exploit_available","old":"false","new":"true"},{"seq":179044,"id":"CVE-2026-79698","ts":1789348257388,"field":"exploit_available","old":"true","new":"false"},{"seq":177837,"id":"CVE-2026-79698","ts":1789346356368,"field":"exploit_available","old":"false","new":"true"},{"seq":176630,"id":"CVE-2026-79698","ts":1789343157580,"field":"exploit_available","old":"true","new":"false"},{"seq":174747,"id":"CVE-2026-79698","ts":1789334853527,"field":"exploit_available","old":"false","new":"true"},{"seq":173542,"id":"CVE-2026-79698","ts":1789333641583,"field":"exploit_available","old":"true","new":"false"},{"seq":172356,"id":"CVE-2026-79698","ts":1789331081002,"field":"exploit_available","old":"false","new":"true"},{"seq":171170,"id":"CVE-2026-79698","ts":1789328751116,"field":"exploit_available","old":"true","new":"false"},{"seq":169965,"id":"CVE-2026-79698","ts":1789327145102,"field":"exploit_available","old":"false","new":"true"},{"seq":168760,"id":"CVE-2026-79698","ts":1789323808035,"field":"exploit_available","old":"true","new":"false"},{"seq":167555,"id":"CVE-2026-79698","ts":1789319670405,"field":"exploit_available","old":"false","new":"true"},{"seq":166350,"id":"CVE-2026-79698","ts":1789318737835,"field":"exploit_available","old":"true","new":"false"},{"seq":165145,"id":"CVE-2026-79698","ts":1789315774928,"field":"exploit_available","old":"false","new":"true"},{"seq":163940,"id":"CVE-2026-79698","ts":1789313603544,"field":"exploit_available","old":"true","new":"false"},{"seq":162735,"id":"CVE-2026-79698","ts":1789311887600,"field":"exploit_available","old":"false","new":"true"},{"seq":161530,"id":"CVE-2026-79698","ts":1789308698839,"field":"exploit_available","old":"true","new":"false"},{"seq":159643,"id":"CVE-2026-79698","ts":1789300455496,"field":"exploit_available","old":"false","new":"true"},{"seq":158817,"id":"CVE-2026-79698","ts":1789299569282,"field":"exploit_available","old":"true","new":"false"},{"seq":157780,"id":"CVE-2026-79698","ts":1789296619707,"field":"exploit_available","old":"false","new":"true"},{"seq":156632,"id":"CVE-2026-79698","ts":1789294728583,"field":"exploit_available","old":"true","new":"false"},{"seq":155427,"id":"CVE-2026-79698","ts":1789292949621,"field":"exploit_available","old":"false","new":"true"},{"seq":154222,"id":"CVE-2026-79698","ts":1789289768505,"field":"exploit_available","old":"true","new":"false"},{"seq":152872,"id":"CVE-2026-79698","ts":1789281657434,"field":"exploit_available","old":"false","new":"true"},{"seq":152512,"id":"CVE-2026-79698","ts":1789281232847,"field":"exploit_available","old":"true","new":"false"},{"seq":151473,"id":"CVE-2026-79698","ts":1789277610986,"field":"exploit_available","old":"false","new":"true"},{"seq":150434,"id":"CVE-2026-79698","ts":1789276214597,"field":"exploit_available","old":"true","new":"false"},{"seq":149401,"id":"CVE-2026-79698","ts":1789273808384,"field":"exploit_available","old":"false","new":"true"},{"seq":148368,"id":"CVE-2026-79698","ts":1789271310159,"field":"exploit_available","old":"true","new":"false"},{"seq":146400,"id":"CVE-2026-79698","ts":1789269366959,"field":"exploit_available","old":"false","new":"true"},{"seq":145205,"id":"CVE-2026-79698","ts":1789266307873,"field":"exploit_available","old":"true","new":"false"},{"seq":144109,"id":"CVE-2026-79698","ts":1789262590496,"field":"exploit_available","old":"false","new":"true"},{"seq":143013,"id":"CVE-2026-79698","ts":1789261506916,"field":"exploit_available","old":"true","new":"false"}]}