CVE-2026-20761 — EnOcean SmartServer IoT Command Injection
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially craf…
Published: 2026-02-20 · CVSS: 8.1 · CVSS 3.1
A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in arbitrary OS command execution on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7