This vulnerability (CVE-2026-4620) in NEC Platforms, Ltd. Aterm WX1500HP devices is classified as CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). It enables an attacker to execute arbitrary OS commands remotely via network access. The affected versions are those before 1.4.2. The CVSS 4.0 vector indicates the attack requires network access, high attack complexity, no privileges required but high privileges are needed, user interaction, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory details are currently available.

Successful exploitation could allow an attacker to execute arbitrary OS commands on the affected device, potentially leading to compromise of device functionality, data confidentiality, integrity, and availability. The attack requires user interaction and high privileges, which may limit exploitation scenarios. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device, especially from untrusted sources, and monitor for suspicious activity requiring high privileges and user interaction.