Ghostwire

CVE-2026-26461: A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an...

MEDIUM CVSS 5.5 EPSS 5.45%

Published: May 1, 2026 | Last Modified: May 1, 2026

Description

A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a crafted web request.

Ghostwire Analysis — What This Means Practically

Exploitation Probability (EPSS): Moderate — 5.45% (90th percentile)

Measurable exploitation probability. Should be patched in the normal vulnerability management cycle.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References