CVE-2026-7865 — Hidden Console Command
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered …
Published: 2026-05-05 · CVSS: 7.4 · CVSS 4.0
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH console of Crestron devices may use to run underlying OS commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7