CVE-2026-111461

HighCVSS 7.5

Published: 27/10/2026(UTC)Updated: 27/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.37%

72th percentile - higher than 72% of all known CVEs

Summary

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When SMS management is enabled and configured, a remote attacker with required privileges could exploit insufficient input validation to execute arbitrary commands.

Risk Assessment

An authenticated remote attacker could execute arbitrary commands on the device, potentially leading to takeover and network disruption.

Recommendation

Update device firmware and restrict access to SMS management and administrative interfaces.

Other vulnerabilities in OnCell G3150A-LTE Series

CVE-2026-111460High
A hard-coded cryptographic key vulnerability exists in OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared key material and impersonate devices that have not regenerated their keys.

Original NVD description (English source)

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS