{"id":"CVE-2026-7865","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-7865","generatedAt":"2026-10-28T01:48:33.300Z","title":"A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument.","description":"A hidden console command is vulnerable to command injection\nflaw when control characters are passed to its second argument. \n\nA third party researcher Eugene Lim had discovered vulnerability\nin the way console command passes to a popen function call. Attackers with\nauthenticated access to SSH console of Crestron devices may use to run\nunderlying OS commands.","published":"2026-05-05T16:16:20.000Z","lastModified":"2026-07-24T08:10:00.000Z","status":"Awaiting Analysis","sourceIdentifier":"25b0b659-c4b4-483f-aecb-067757d23ef3","cvss":{"version":"4.0","score":7.4,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-88"],"affected":[],"epss":{"score":0.00753,"percentile":0.54772,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://www.crestron.com/Software-Firmware/Firmware/Touchpanels/TS-770-TS-1070-TSS-770-TSS-1070-TSW-570/3-003-0015-001","source":"25b0b659-c4b4-483f-aecb-067757d23ef3"},{"url":"https://www.crestron.com/release_notes/tsw-xx70_3.003.0015.001_release_notes.pdf","source":"25b0b659-c4b4-483f-aecb-067757d23ef3"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-7865","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}