critical9.8
CVE-2026-26478
A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP da…
Impact
A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram and execute arbitrary shell code as the root account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mobvoi | Tichome Mini Firmware | Versions 012-18853, 027-58389 |