Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege.

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege.

SkyBridge MB-A100/MB-A110 provided by Seiko Solutions Inc. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><ul><li>OS command injection (CWE-78) - CVE-2026-50043</li></ul>Takeshi Kuramori and Kaori Takashima of National Institute of Information and Communications Technology, Cybersecurity Research Institute reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.