CVSS 8.6 (high) · published 2026-11-10
A high privileged remote attacker can perform an OpenSSL code injection in the frontends device importer function leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Weakness: CWE-78
Source: NVD CVE-2026-60037
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.