CVE-2026-93289

Deferred Deferred - Pending Action

Command Injection in Device Pairing Process

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: ICS-CERT

Description

The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-24

Generated

2026-09-25

AI Q&A

2026-09-25

EPSS Evaluated

N/A

NVD

CVE-2026-93289

EUVD

EUVD-2026-86410

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a command injection flaw that allows an unauthenticated attacker to execute system commands during the pairing process of the affected products. It requires network access but no privileges or user interaction.

Impact Analysis

An attacker could gain control over the system, steal data, install malware, or disrupt operations. The high CVSS scores indicate severe impact on confidentiality, integrity, and availability.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and security controls.

Mitigation Strategies

Immediately isolate affected systems from the network to prevent exploitation. Disable pairing functionality if not required. Apply vendor patches or updates as soon as they become available. Monitor network traffic for unusual command execution patterns during pairing processes.

Hi! I’m here to help you understand CVE-2026-93289. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70