OS Command Injection in SkyBridge MB-A100/MB-A110 by Seiko Solutions
CVE-2026-50043

8.6HIGH

Key Information:

Vendor

Seiko Solutions Inc.

Status
Skybridge Mb-a100/mb-a110
Vendor
CVE Published:
1 July 2026

What is CVE-2026-50043?

A vulnerability exists in the SkyBridge MB-A100 and MB-A110 devices that allows for improper handling of special characters in OS commands. This flaw permits an authenticated attacker with administrative privileges to execute arbitrary OS commands on the affected systems, potentially leading to unauthorized access or data compromise. Organizations using these devices should ensure proper security measures are in place and consider applying available patches or mitigations.

Affected Version(s)

SkyBridge MB-A100/MB-A110 all versions

References

https://www.seiko-sol.co.jp/archives/94618/
https://jvn.jp/en/jp/JVN20721579/

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.