This vulnerability (CVE-2026-9593) in the iDTM FDI product permits an attacker who already has elevated privileges and access to the host system to enable the debug interface by placing a specially crafted file within the application directory. Enabling the debug interface could allow unauthorized access to connected devices and enable attackers to expose, modify, or disrupt device data or operations. The vulnerability is classified under CWE-427 (Uncontrolled Search Path Element). There is no information about available patches or affected versions. The CVSS 3.1 vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker with elevated privileges and host access can enable the debug interface, potentially gaining unauthorized access to connected devices. This may result in exposure, modification, or disruption of device data or operations, impacting confidentiality, integrity, and availability of the affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict elevated privileges and host system access to trusted users only to reduce risk.