CVE-2026-2670 | Advantech WISE-6610 1.2.1_20251110 Background Management openvpn_apply delete_file os command injection

A vulnerability categorized as critical has been discovered in Advantech WISE-6610 1.2.1_20251110. Affected is an unknown function of the file /cgi-bin/luci/admin/openvpn_apply of the component Background Management. Such manipulation of the argument delete_file leads to os command injection.

This vulnerability is documented as CVE-2026-2670. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.