Vulnerability · Published Sep 7, 2026 · Assigned by VulDB
CVE-2026-79697Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection
Critical 9.9
In plain English
A critical-severity command injection in WISE-6610-CB from Advantech. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.9% (higher than 92% of all known vulnerabilities).
Official description
A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This affects the function basicstation_apply of the component Basic Station Certificate-Deletion Handler. This manipulation of the argument act causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.2.4_20260821 is able to mitigate this issue. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Advantech | WISE-6610-NB | 1.2.1_20251110 |
| Advantech | WISE-6610-EB | 1.2.1_20251110 |
| Advantech | WISE-6610-TB | 1.2.1_20251110 |
| Advantech | WISE-6610-JB | 1.2.1_20251110 |
| Advantech | WISE-6610-CB | 1.2.1_20251110 |
| Advantech | WISE-6610-EL-NB | 1.2.1_20251110 |
| Advantech | WISE-6610-EL-EB | 1.2.1_20251110 |
| Advantech | WISE-6610-EL-TB | 1.2.1_20251110 |
| Advantech | WISE-6610-EL-JB | 1.2.1_20251110 |
| Advantech | WISE-6610-EL-CB | 1.2.1_20251110 |
| Advantech | WISE-6610P-DEA | 1.2.1_20251110 |
| Advantech | WISE-6610P-DNA | 1.2.1_20251110 |
| Advantech | WISE-6610P-DTA | 1.2.1_20251110 |
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
References
- VDB-399512 | Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection vdb-entry, technical-description
- VDB-399512 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-79697 | CVE Analysis and Report third-party-advisory
- Submit #879208 | Advantech Technology (China) Co., Ltd. WISE-6610 v1.2.1_20251110 Command Injection third-party-advisory
- https://uvxbywu62qm.feishu.cn/wiki/EzwXwS0vKiroHmk9rqzcjP0EnMe?from=from_copylink exploit
- https://www.advantech.com/zh-tw/security-advisory related
- https://www.advantech.com/en-us/support/details/firmware?id=1-2K7AXRI patch
- https://www.advantech.com/ product