CVE-2026-2533Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/tosei_datasend.php. Executing a manipulation of the argument adr_txt_1 can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

6 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 2d ago at 4 mentions (2026-02-16); latest day: 1
6 total mentions across 3 days

Deep dive

Activity timeline6 mentions / 3d

Signal classification2 categories

Disclosure

583.3%

General

116.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-16	4	Disclosure3General1
2026-02-18	1	Disclosure1
2026-02-20	1	Disclosure1

Full discourse6 posts

Vulmon Vulnerability Feed@VulmonFeeds234d
Disclosure
CVE-2026-2533 Command Injection Vulnerability in Tosei Self-service Washing Machine 4.0... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2533 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
A brief notice of a command injection vulnerability (CVE‑2026‑2533) affecting the Tosei Self‑service Washing Machine 4.0, with links to a vulnerability details page and a notification alert.
0002040
4.0K followersView on X
CVE@CVEnew234d
Disclosure
CVE-2026-2533 A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/tosei_datasend.php. Executing a manipulation of t… https://www.cve.org/CVERecord?id=CVE-2026-2533
Post summary
A vulnerability was identified in Tosei Self‑service Washing Machine 4.02 affecting an unknown function in /cgi-bin/tosei_datasend.php, but the report contains no PoC, exploitation details, patch, or mitigation information.
00010382
56.4K followersView on X
CRAC Learning - Tech@cracbot230d
Disclosure
CVE-2026-2533 (CVSS:6.9, HIGH) is Awaiting Analysis. A flaw has been found in Tosei Self-service Washing Machine 4.02. Impacted is an unknown function of the file /cgi-bin/t..https://nvd.nist.gov/vuln/detail/CVE-2026-2533 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces a newly identified vulnerability (CVE‑2026‑2533) in a Tosei self‑service washing machine, noting its CVSS score and the impacted function, but offers no exploit or patch details.
0000029
171 followersView on X
Cybersecurity Aide@SecAideInfo232d
Disclosure
🚨#CyberAlert: CVE-2026-2533 found in Tosei Self-service Washing Machine 4.02! 🌐 Remote Command Injection via /cgi-bin/tosei_datasend.php's 'adr_txt_1'. Exploit published, high risk of wild exploitation! 🔓 Vendor unresponsive. Stay vigilant! 🔍 #CyberSecurity #IoTSecurity
Post summary
The tweet announces the discovery of CVE-2026-2533, a remote command injection vulnerability in a specific firmware version, and warns of its high risk without providing a patch or exploit code.
0000032
20 followersView on X
CVEarity@CVEarity234d
Disclosure
⚡ New CVE Alert: CVE-2026-2533 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2533 #CVE-2026-2533 #CVE #High #CyberSecurity #InfoSec https://t.co/Yz0mWxKMW5
Post summary
A new CVE (CVE-2026-2533) with severity 7.3 has been announced, affecting multiple unspecified products, but no PoC, exploit, or patch details are provided.
0000050
56 followersView on X
RedPacket Security@RedPacketSec234d
General
CVE Alert: CVE-2026-2533 - Tosei - Self-service Washing Machine - https://www.redpacketsecurity.com/cve-alert-cve-2026-2533-tosei-self-service-washing-machine/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-2533 #tosei #self-service-washing-machine
Post summary
The post announces a CVE alert for a self‑service washing machine but provides no technical, exploit, or mitigation details.
0000086
3.5K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-2533

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A brief notice of a command injection vulnerability (CVE‑2026‑2533) affecting the Tosei Self‑service Washing Machine 4.0, with links to a vulnerability details page and a notification alert.

CVE@CVEnewDisclosure

A vulnerability was identified in Tosei Self‑service Washing Machine 4.02 affecting an unknown function in /cgi-bin/tosei_datasend.php, but the report contains no PoC, exploitation details, patch, or mitigation information.

CRAC Learning - Tech@cracbotDisclosure

The post announces a newly identified vulnerability (CVE‑2026‑2533) in a Tosei self‑service washing machine, noting its CVSS score and the impacted function, but offers no exploit or patch details.

Cybersecurity Aide@SecAideInfoDisclosure

The tweet announces the discovery of CVE-2026-2533, a remote command injection vulnerability in a specific firmware version, and warns of its high risk without providing a patch or exploit code.

CVEarity@CVEarityDisclosure

A new CVE (CVE-2026-2533) with severity 7.3 has been announced, affecting multiple unspecified products, but no PoC, exploit, or patch details are provided.

RedPacket Security@RedPacketSecGeneral

The post announces a CVE alert for a self‑service washing machine but provides no technical, exploit, or mitigation details.