CVE-2026-35018 | NetComm Wireless Pty NF20MESH prior R6B032 Shell Command dalStorage_addUserAccount os command injection

A vulnerability categorized as critical has been discovered in NetComm Wireless Pty NF20MESH. Affected by this issue is the function dalStorage_addUserAccount of the component Shell Command Handler. The manipulation results in os command injection.

This vulnerability is reported as CVE-2026-35018. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.