Command Injection Vulnerability in Advantech WISE-6610 Series
CVE-2026-79697

9.4CRITICAL

Key Information:

Vendor

Advantech
Status
Wise-6610-nb
Wise-6610-eb
Wise-6610-tb
Wise-6610-jb
Vendor
CVE Published:
7 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-79697?

A command injection vulnerability affects the Advantech WISE-6610 series due to improper handling of input in the basicstation_apply function of the Basic Station Certificate-Deletion Handler. This security flaw allows unauthorized remote exploitation, enabling an attacker to execute arbitrary commands on the affected devices. To mitigate the risk, users are strongly advised to upgrade to version 1.2.4_20260821, which includes essential security patches. The vendor has promptly addressed this issue by releasing a fix after being notified.

Affected Version(s)

WISE-6610-CB 1.2.1_20251110

WISE-6610-EB 1.2.1_20251110

WISE-6610-EL-CB 1.2.1_20251110

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-79697 - Proof of Concept

References

https://vuldb.com/vuln/399512
vdb-entrytechnical-description
https://vuldb.com/vuln/399512/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-79697
third-party-advisory

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

hubdk01 (VulDB User)
VulDB CNA Team
.