Quick answers
- Is CVE-2026-73166 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-73166 being exploited in the wild.
- How severe is CVE-2026-73166?
- Informational severity, with a CVSS score of 8.6, published 16 September 2026.
- Which products and versions are affected?
- Advantech EKI-1242IEIMS V1.06.01.
- Is there a fix for CVE-2026-73166?
- A patch was published on 2026-09-04: Firmware version 2.00.01 available Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-73166 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-73166?
- Check whether you run Advantech EKI-1242IEIMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a CWE-94 code injection flaw in the web management interface of Advantech EKI-1242IEIMS firmware version V1.06.01. An authenticated remote attacker can inject arbitrary code that executes with root privileges on the device, including OS commands. The attack requires valid credentials but no user interaction. Nozomi Networks Labs discovered and reported the issue; a firmware update to version 2.00.01 is available to address the vulnerability.
Affected products
- Advantech EKI-1242IEIMS V1.06.01
Timeline
- 2026-09-16: disclosed
- 2026-09-04: patched: Firmware version 2.00.01 available