CVE-2026-18808

CVSS 9.8 (critical) · published 2026-09-01

Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code Injection. This issue affects KIO (Klemsan Internet Objects): before v1.9.

Weakness: CWE-94

Source: NVD CVE-2026-18808

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0963

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.