CVE-2026-75937 — OS Command Injection in Digi Accelerated Linux (DAL OS)
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges …
Published: 2026-10-02 · CVSS: 9.4 · CVSS 4.0
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7