CVE-2026-56413

CriticalCVSS 10.0/10Last modified Jul 1, 2026

Description

Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a specially crafted packet containing a malicious payload that is processed without adequate sanitization, resulting in arbitrary command execution with root-level privileges.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Jun 30, 2026
Last modified: Jul 1, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-564147.2A vulnerability exists in H.View IP cameras certificate-related upload interfaces allow authenticated users to store arbitrary file content CVE-2026-5641510.0Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authenticat CVE-2026-564164.8In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINF CVE-2026-56427.3A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknow CVE-2026-564229.4Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) and ownership/sco CVE-2026-564238.8MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affected deleteSelecti CVE-2026-564248.8MISP core contained multiple broken access-control flaws where authorization checks were performed against the wrong entity, or where owners CVE-2026-564258.8The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could CVE-2026-564288.1The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default con CVE-2026-56432.4A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This impacts an unknow CVE-2026-564346.5NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module. This vulnerability may exist when the Server-Side I CVE-2026-564378.4Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the