Skip to content
OpenAdvisories
High · 8.8 CVE-2026-77853 EUVD-2026-78332GHSA-fmfw-g6xj-377f

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A u…

Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by jpcert

Vendor: LITE-ON Technology Product: FF-RFI078I4 Product: FF-RFI079I4

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

Affected products

VendorProductAffectedFixed
LITE-ON Technology FF-RFI079I4 < 02.01.15 02.01.15
LITE-ON Technology FF-RFI078I4 < 02.01.15 02.01.15

References