Vulnerability · Published Sep 1, 2026 · Assigned by VulDB

CVE-2026-84059ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection

High 7.4

In plain English

A high-severity command injection in UA-2200 from ICP DAS. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High

Exploit odds (30 days)2.0%top 18.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
ICP DAS	UA-2200	20260704
ICP DAS	UA-5200	20260704

Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-397547 | ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection vdb-entry, technical-description
VDB-397547 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-84059 | CVE Analysis and Report third-party-advisory
Submit #880065 | ICP DAS UA‑2200 Series UA‑2200 Series Command Injection third-party-advisory
Submit #880072 | ICP DAS UA‑5200 Series UA‑5200 Series Command Injection (Duplicate) third-party-advisory
https://uvxbywu62qm.feishu.cn/wiki/SzRyw0uSnieCLDkMR8NcgcvanMd?from=from_copylink related
https://uvxbywu62qm.feishu.cn/wiki/KwSzwcCstioZqKk7PODcIsDAn4W?from=from_copylink exploit