CVE-2026-43830 - Vulnerability Details - OpenCVE

Full details and mitigation steps are currently restricted and will be published at a later date.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00139.

Exploitation none

Automatable yes

Technical Impact total

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx

History

Fri, 31 Jul 2026 21:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-77
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 31 Jul 2026 06:30:00 +0000

Type	Values Removed	Values Added
Description	Successful exploitation of the command injection vulnerability could allow an attacker to execute arbitrary commands during the firmware upgrade file verification process.	Full details and mitigation steps are currently restricted and will be published at a later date.
Title	Command Injection Vulnerability	tbc
References	https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-097	https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx
Metrics	cvssV4_0 `{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Fri, 31 Jul 2026 04:15:00 +0000

Type	Values Removed	Values Added
Description		Successful exploitation of the command injection vulnerability could allow an attacker to execute arbitrary commands during the firmware upgrade file verification process.
Title		Command Injection Vulnerability
References		https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-097
Metrics		cvssV4_0 `{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: CSA

Published: 2026-07-31T02:53:27.625Z

Updated: 2026-07-31T19:52:41.957Z

Reserved: 2026-05-04T03:13:26.241Z

Link: CVE-2026-43830

Vulnrichment

Updated: 2026-07-31T19:50:29.856Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43830", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "state": "PUBLISHED", "assignerShortName": "CSA", "dateReserved": "2026-05-04T03:13:26.241Z", "datePublished": "2026-07-31T02:53:27.625Z", "dateUpdated": "2026-07-31T19:52:41.957Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-07-31T05:20:00.541Z"}, "title": "tbc", "datePublic": "2026-07-31T02:49:00.000Z", "affected": [{"vendor": "tbc", "product": "tbc", "versions": [{"status": "affected", "version": "tbc"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Full details and mitigation steps are currently restricted and will be published at a later date.</p>"}]}], "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx"}], "solutions": [{"lang": "en", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Full details and mitigation steps are currently restricted and will be published at a later date."}]}], "credits": [{"lang": "en", "value": "tbc", "type": "finder"}, {"lang": "en", "value": "tbc1", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-31T19:51:07.430876Z", "id": "CVE-2026-43830", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T19:52:41.957Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-43830", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-31T19:51:07.430876Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T19:50:29.856Z"}}], "cna": {"title": "tbc", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "tbc"}, {"lang": "en", "type": "finder", "value": "tbc1"}], "affected": [{"vendor": "tbc", "product": "tbc", "versions": [{"status": "affected", "version": "tbc"}], "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "supportingMedia": [{"type": "text/html", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "base64": false}]}], "datePublic": "2026-07-31T02:49:00.000Z", "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "supportingMedia": [{"type": "text/html", "value": "<p>Full details and mitigation steps are currently restricted and will be published at a later date.</p>", "base64": false}]}], "providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-07-31T05:20:00.541Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43830", "state": "PUBLISHED", "dateUpdated": "2026-07-31T19:52:41.957Z", "dateReserved": "2026-05-04T03:13:26.241Z", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "datePublished": "2026-07-31T02:53:27.625Z", "assignerShortName": "CSA"}, "dataVersion": "5.2"}