CVE-2026-80217 Command injection in FF-RFI078I4
An authenticated user with SSH access can execute arbitrary OS commands on LITE-ON RFID readers due to hidden functionality.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-80217?
CVE-2026-80217 is a high-severity command injection vulnerability in LITE-ON Technology Corporation FF-RFI078I4, published on 15 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode on the product to execute arbitrary OS commands.
Weakness: CWE-912
Which versions are affected by CVE-2026-80217?
How do I fix CVE-2026-80217?
No fix has been published for CVE-2026-80217 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-80217 being exploited?
There is no known exploitation of CVE-2026-80217 in the wild and no public exploit code.
Sources
Also known as GHSA-g28v-9m8c-rvf6.