{"id":"CVE-2026-90847","title":"A vulnerability was determined in EFM ipTIME C200E 1.094","summary":"A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the at…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-77","CWE-78"],"vendor":"EFM","product":"ipTIME C200E","affected":["iptime_c200e 1.094"],"published":"2026-09-15","updated":"2026-09-15","sourceUpdated":"2026-09-15T19:17:46.767","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90847","references":[{"url":"https://drive.google.com/file/d/19WVo2tOImpmSEg3dFsmyB5Rw1aMQXyyd/view?usp=drive_link","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-90847","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/925831","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/403400","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/403400/cti","label":"cna@vuldb.com"},{"url":"https://youtu.be/qdFGRSpCiY0","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-15T19:05:28.206271Z"},"epss":0.02178,"epssPercentile":0.8133,"ingestedAt":"2026-09-15T01:18:29.936Z","slug":"CVE-2026-90847","body":"## Overview\n\nA vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux_set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":50.1,"likelihood":0.4,"exploitation":12,"ransomware":0},"changes":[{"seq":204474,"id":"CVE-2026-90847","ts":1789501414124,"field":"exploit_available","old":"false","new":"true"}]}