CVE-2026-39459
High · 7.2CVSS
7.2
EPSS
0.5%
Published
May 13, 2026
CISA due date
—
The record
A vulnerability exists in iControl REST and the TMOS Shell (tmsh) where a highly privileged, authenticated attacker with at least the Manager role can create configuration objects that allow running arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79944 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-272
- CVE-2026-79693 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-272
- CVE-2026-59915 Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least… CWE-272
- CVE-2026-49500 Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper… CWE-272
- CVE-2026-15271 A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG… CWE-272
- CVE-2026-15270 A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. CWE-272
- GHSA-v52w-28xh-v562 Kozou: Unauthenticated MCP HTTP server and bundled dev-stack hardening (DNS-rebinding… CWE-272
- CVE-2026-11620 A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. CWE-272