Exploitation Summary
EIP tracks 3 public exploits for CVE-2026-2670. PoCs published by XiaomingX, ali-py3.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2026-2670, demonstrating a command injection vulnerability in Advantech WISE-6610's OpenVPN configuration endpoint. The exploit leverages improper sanitization of the 'delete_file' parameter to execute arbitrary commands with root privileges.
Description
A vulnerability was identified in Advantech WISE-6610 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/openvpn_apply of the component Background Management. Such manipulation of the argument delete_file leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Exploits (3)
This repository contains a functional Python exploit for CVE-2026-2670, demonstrating a command injection vulnerability in Advantech WISE-6610's OpenVPN configuration endpoint. The exploit leverages improper sanitization of the 'delete_file' parameter to execute arbitrary commands with root privileges.
This repository contains a functional Python exploit for CVE-2026-2670, demonstrating a command injection vulnerability in Advantech WISE-6610 industrial cellular routers. The exploit targets the `/cgi-bin/luci/admin/openvpn_apply` endpoint, allowing authenticated attackers to execute arbitrary system commands with root privileges via the `delete_file` parameter.
This repository contains a functional Python exploit for CVE-2026-2670, demonstrating a command injection vulnerability in Advantech WISE-6610's OpenVPN configuration deletion endpoint. The exploit includes authentication handling and command execution with root privileges.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H