This vulnerability (CVE-2026-5416) arises from improper neutralization of special elements in a name parameter within the TURCK TBEN-LL-SE-M2 device. This flaw allows a remote attacker with low privileges to perform OS command injection, resulting in full compromise of the system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch is currently published, and no known exploits are reported in the wild.

Successful exploitation allows an attacker to execute arbitrary operating system commands remotely with low privileges, leading to full system compromise. This includes complete control over the affected device, potentially impacting confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device to trusted users only and monitor for suspicious activity related to command injection attempts.