Vulnerability · Published Jul 1, 2026 · Assigned by jpcert

CVE-2026-50043

High 7.2

In plain English

A high-severity OS command injection in SkyBridge MB-A100/MB-A110 from Seiko Solutions Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).

Severity (CVSS 3.0)7.2High
Exploit odds (30 days)1.7%top 22.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege.

Affected products (as reported)

VendorProductVersions
Seiko Solutions Inc. SkyBridge MB-A100/MB-A110 all versions

Weakness: CWE-78 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References