Skip to content
OpenAdvisories
Critical ICSA-26-225-02 1 CVE

Haiwell IoT Cloud HMI Gateway

Published Aug 13, 2026 · Updated Aug 13, 2026

Vendor: Haiwell Product: IoT Cloud HMI Gateway

Summary

Successful exploitation of this vulnerability may allow an attacker to inject and execute arbitrary OS commands with root privileges.

Vulnerabilities 1

  • Critical 10.0
    CVE-2026-19188

    Haiwell IoT Cloud HMI Gateway OS Command Injection

    A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The vulnerability exists in the Net Check feature accessible via the /setting endpoint. The cmdPing Socket.io event fails to properly sanitize user…

    Haiwell Haiwell IoT Cloud HMI Gateway

Revision history

  1. #1

    Initial Publication

References