CVE-2026-56808 identifies an OS command injection vulnerability in the DGM3103SCT product by AVTECH Security Corporation. The flaw arises from improper neutralization of special elements used in OS commands, enabling an authenticated user with access to the web management console to execute arbitrary commands as root. The vulnerability is rated high severity with a CVSS 3.0 base score of 7.2, reflecting network attack vector, low attack complexity, high privileges required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no exploits have been observed in the wild.

Successful exploitation allows an authenticated user with web management console access to execute arbitrary OS commands with root privileges, potentially compromising the entire device and its data confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the web management console to trusted users only and monitor for suspicious activity related to command execution.