CVE-2026-18808 — Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO

CVE-2026-18808

Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO PUBLISHED

Description (CNA)

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection. This issue affects KIO (Klemsan Internet Objects): before v1.9.

Affected (CNA)

Vendor / product	Versions
Klemsan Electrical Electronics Inc. / KIO (Klemsan Internet Objects)	affected 0 before v1.9

CWE

CWE-94

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0963

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.