Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This affects the function basicstation_apply of the component Basic Station Certificate-Deletion Handler. This manipulation of the argument act causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.2.4_20260821 is able to mitigate this issue. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-07 | 2 | Active Exploitation1Disclosure1 |
| 2026-09-10 | 1 | General1 |
🎯 Most likely to be exploited next (EPSS): • CVE-2026-79697 — EPSS 3.4% · CVSS 9.9 • CVE-2026-78488 — EPSS 3.2% · CVSS 6.5 • CVE-2026-86148 — EPSS 2.5% · CVSS 9.4 📄 Full weekly tables → https://github.com/notcve/reports/blob/main/weekly/2026-09-10.md
Post summary
The tweet simply lists several CVEs with their EPSS scores and CVSS ratings, without mentioning PoC, exploits, patches, or active exploitation.
Advantech fixed three root command injections in its WISE-6610 gateway and published no advisory for any of them. Two were named today at CVSS 9.9; the third has had a public exploit since February. https://severitydaily.com/advantech-wise-6610-cve-2026-79697-79698-command-injection-no-vendor-advisory/
Post summary
Advantech fixed three root command injection flaws in its WISE-6610 gateway without publishing an advisory. The third CVE has been actively exploited in the wild since February.
🚨 Advantech WISE-6610 — TWO CVSS 9.9 CVEs CVE-2026-79697 (9.9): Certificate deletion command injection CVE-2026-79698 (9.9): Node-RED command injection → https://threataft.com/articles/advantech-wise-6610-two-cvss-9-9-cves #cybersecurity #infosec #Advantech #IIoT #OTSecurity #CVSS9 #PatchNow #ThreatIntel
Post summary
Two new high‑severity command injection vulnerabilities (CVE‑2026‑79697 and CVE‑2026‑79698) have been disclosed for Advantech WISE‑6610, with details referenced in the linked article.