Command Injection Vulnerability in Cobham SATCOM VSAT7090 Maritime Satellite Router
CVE-2026-83772

9.4CRITICAL

Key Information:

Vendor

Cobham

Status
Satcom Vsat7090 Maritime Satellite Router
Vendor
CVE Published:
1 September 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-83772?

A command injection vulnerability has been identified in the Cobham SATCOM VSAT7090 Maritime Satellite Router affecting the mail-report.sh component. This issue arises from improper handling in the c_set_reports_decode function, which allows manipulation of the sender/recipients argument. Attackers can exploit this vulnerability remotely, enabling them to execute arbitrary commands within the system. It is crucial to address this issue immediately as the exploit is now publicly available, and the vendor has not provided any formal response to this disclosure.

Affected Version(s)

SATCOM VSAT7090 Maritime Satellite Router 20260704

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-83772 - Proof of Concept

References

https://vuldb.com/vuln/397501
vdb-entrytechnical-description
https://vuldb.com/vuln/397501/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-83772
third-party-advisory

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

huliangjia (VulDB User)
VulDB CNA Team
.