CVE-2026-77853

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A user who can log in to the product's M-Plane (NETCONF) may execute arbitrary OS commands.

CVSS Vector

References

• https://5g.liteon.com/security/flexfi/
• https://jvn.jp/en/jp/JVN02049764/