https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T14:59:22.012178+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352858 EUVD-2026-352858 2026-10-17T14:59:22.016520+00:00 EUVD-2026-352858 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19188 fkie_cve-2026-19188 2026-10-17T14:59:22.016556+00:00

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to the underlying operating system, allowing an attacker to inject and execute arbitrary OS commands with root privileges.

 https://cve.radiocsirt.org/vuln/ghsa-xjrj-4jhg-7qmh GHSA-xjrj-4jhg-7qmh 2026-10-17T14:59:22.016587+00:00

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to the underlying operating system, allowing an attacker to inject and execute arbitrary OS commands with root privileges.

 https://cve.radiocsirt.org/vuln/icsa-26-225-02 ICSA-26-225-02 — Haiwell IoT Cloud HMI Gateway 2026-10-17T14:59:22.016604+00:00

A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user-supplied input before passing it to the underlying operating system, allowing an attacker to inject and execute arbitrary OS commands with root privileges