Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-18808 EUVD-2026-69130GHSA-25fc-9x7f-8x83

Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO

Published Sep 1, 2026 · Updated Sep 1, 2026 · Assigned by TR-CERT

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection.

This issue affects KIO (Klemsan Internet Objects): before v1.9.

Affected products

VendorProductAffectedFixed
Klemsan Electrical Electronics KIO (Klemsan Internet Objects) < v1.9 v1.9

References