CVE-2026-60037 is a vulnerability where a high privileged remote attacker can inject code via the OpenSSL component in the frontends device importer function, potentially leading to full system compromise including loss of confidentiality, integrity, and availability.