7.2
High
CVE-2026-44879 A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote…
Description
A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EdgeConnect SD-WAN Gateway (ECOS) 9.5 | 9.5.0.0 → 9.5.4.0 | No fix stated |
| EdgeConnect SD-WAN Gateway (ECOS) 9.4 | 9.4.0.0 → 9.4.4.0 | No fix stated |