# CVE-2026-79697: Advantech WISE-6610 command injection in certificate deletion

Source: https://junglewise.ai/threats/cve-2026-79697-advantech-wise-6610-command-injection-in-certificate-deletion  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-07. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-79697 · Severity: critical · CVSS 9.9 · Published 2026-09-07

Advantech WISE-6610 industrial control devices are used in factory and process automation environments to manage network connectivity and data collection. A command injection vulnerability in the certificate deletion handler allows remote attackers to execute arbitrary system commands on affected devices, potentially enabling unauthorized access to critical industrial operations and sensitive manufacturing data.

Technologies: [Advantech WISE-6610-CB](https://junglewise.ai/threats/technologies/wise-6610-cb), [Advantech WISE-6610-EB](https://junglewise.ai/threats/technologies/wise-6610-eb), [Advantech WISE-6610-EL-CB](https://junglewise.ai/threats/technologies/wise-6610-el-cb), [Advantech WISE-6610-EL-EB](https://junglewise.ai/threats/technologies/wise-6610-el-eb), [Advantech WISE-6610-EL-JB](https://junglewise.ai/threats/technologies/wise-6610-el-jb), [Advantech WISE-6610-EL-NB](https://junglewise.ai/threats/technologies/wise-6610-el-nb), [Advantech WISE-6610-EL-TB](https://junglewise.ai/threats/technologies/wise-6610-el-tb), [Advantech WISE-6610-JB](https://junglewise.ai/threats/technologies/wise-6610-jb), [Advantech WISE-6610-NB](https://junglewise.ai/threats/technologies/wise-6610-nb), [Advantech WISE-6610-TB](https://junglewise.ai/threats/technologies/wise-6610-tb), [Advantech WISE-6610P-DEA](https://junglewise.ai/threats/technologies/wise-6610p-dea), [Advantech WISE-6610P-DNA](https://junglewise.ai/threats/technologies/wise-6610p-dna), [Advantech WISE-6610P-DTA](https://junglewise.ai/threats/technologies/wise-6610p-dta). Vendors: [Advantech](https://junglewise.ai/threats/vendors/advantech).

## Quick answers

**Is CVE-2026-79697 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-79697 being exploited in the wild.

**How severe is CVE-2026-79697?** Critical severity, with a CVSS score of 9.9, published 7 September 2026.

**Which products and versions are affected?** Advantech WISE-6610-CB 1.2.1_20251110; Advantech WISE-6610-EB 1.2.1_20251110; Advantech WISE-6610-EL-CB 1.2.1_20251110; Advantech WISE-6610-EL-EB 1.2.1_20251110; and 9 more.

**Is there a fix for CVE-2026-79697?** A patch was published on 2026-08-21: Fixed in firmware version 1.2.4_20260821 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-79697 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-79697?** Check whether you run Advantech WISE-6610-CB, Advantech WISE-6610-EB, Advantech WISE-6610-EL-CB or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability exists in the basicstation_apply function of the Basic Station Certificate-Deletion Handler component in Advantech WISE-6610 devices. The vulnerability is triggered by improper sanitization of the "act" argument, allowing an attacker to inject shell commands that are executed with device privileges. The attack is remotely exploitable and requires no authentication. A successful exploit grants the attacker arbitrary code execution on the affected industrial device. The vulnerability has been patched in firmware version 1.2.4_20260821 and later; users should upgrade immediately.

## Affected products

- Advantech WISE-6610-NB 1.2.1_20251110
- Advantech WISE-6610-EB 1.2.1_20251110
- Advantech WISE-6610-TB 1.2.1_20251110
- Advantech WISE-6610-JB 1.2.1_20251110
- Advantech WISE-6610-CB 1.2.1_20251110
- Advantech WISE-6610-EL-NB 1.2.1_20251110
- Advantech WISE-6610-EL-EB 1.2.1_20251110
- Advantech WISE-6610-EL-TB 1.2.1_20251110
- Advantech WISE-6610-EL-JB 1.2.1_20251110
- Advantech WISE-6610-EL-CB 1.2.1_20251110
- Advantech WISE-6610P-DEA 1.2.1_20251110
- Advantech WISE-6610P-DNA 1.2.1_20251110
- Advantech WISE-6610P-DTA 1.2.1_20251110

## Timeline

- 2026-09-07: disclosed
- 2026-08-21: patched: Fixed in firmware version 1.2.4_20260821

## References

- [https://uvxbywu62qm.feishu.cn/wiki/EzwXwS0vKiroHmk9rqzcjP0EnMe?from=from_copylink](https://uvxbywu62qm.feishu.cn/wiki/EzwXwS0vKiroHmk9rqzcjP0EnMe?from=from_copylink)
- [https://vuldb.com/cve/CVE-2026-79697](https://vuldb.com/cve/CVE-2026-79697)

## Related threats

- [Advantech WISE-6610 command injection in Node-RED Library](https://junglewise.ai/threats/cve-2026-79698-advantech-wise-6610-command-injection-in-node-red-library)
- [Advantech WISE-6610 OS command injection in OpenVPN management](https://junglewise.ai/threats/cve-2026-2670-advantech-wise-6610-os-command-injection-in-openvpn-management)