CVE-2025-26320 | t0mer BroadlinkManager 5.9.1 /device/ping IP Address os command injection

A vulnerability was found in t0mer BroadlinkManager 5.9.1. It has been classified as critical. Affected is an unknown function of the file /device/ping. The manipulation of the argument IP Address leads to os command injection.

This vulnerability is traded as CVE-2025-26320. The attack needs to be initiated within the local network. There is no exploit available.