CVE-2026-77853 — LITE-ON Technology Corporation / FF-RFI079I4

CVE-2026-77853

LITE-ON Technology Corporation / FF-RFI079I4 PUBLISHED

Description (CNA)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

Affected (CNA)

Vendor / product	Versions
LITE-ON Technology Corporation / FF-RFI079I4	affected 0 before 02.01.15
LITE-ON Technology Corporation / FF-RFI078I4	affected 0 before 02.01.15

CWE

CWE-78

References

https://5g.liteon.com/security/flexfi/
https://jvn.jp/en/jp/JVN02049764/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.