CVE-2026-5416

Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.

Score

CVSS 3.1 8.8 High

Status

Deferred - info@cert.vde.com

Published

2026-06-16

Last modified

2026-06-16

Weaknesses

CWE-78

Affected products

• Tben-l4-se-m2 (Turck)
• Tben-l5-se-m2 (Turck)
• Tben-ll-se-m2 (Turck)

References

• https://certvde.com/de/advisories/VDE-2026-038