Code Injection Vulnerability in KIO by Klemsan Electrical Electronics Inc.
CVE-2026-18808

9.8CRITICAL

Key Information:

Vendor: Klemsan Electrical Electronics Inc.
Status: Kio (klemsan Internet Objects)
Vendor: CVE Published:; 1 September 2026

🔔 Create Klemsan Electrical Electronics Inc. Vulnerability Alert

What is CVE-2026-18808?

A code injection vulnerability exists in KIO (Klemsan Internet Objects) developed by Klemsan Electrical Electronics Inc. This flaw allows attackers to manipulate input data, potentially leading to unauthorized command execution and data compromise. It affects all versions prior to v1.9, presenting significant risks to system integrity if not addressed promptly.

Affected Version(s)

KIO (Klemsan Internet Objects) 0

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...

government-resource

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 1, 2026
Vulnerability Reserved
Aug 4, 2026

Credit

Yemliha İPEK

CVE-2026-18808 Data

JSON