Threat database

CVE-2026-7865 is a command injection vulnerability in Crestron Electronics Touchpanels (x60/x70) firmware version 3.002.0043.001. The flaw exists in a hidden console command that improperly neutralizes argument delimiters when passing control characters to its second argument, allowing command injection. An attacker with authenticated SSH console access could exploit this to execute arbitrary OS commands. The vulnerability has a high severity score of 7.4. No official patch or remediation guidance has been published yet.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCREENS x70: from 3.000.0110.001 before 3.001.0031.001. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061 - (no fix released, product discontinued)   For x70   The Affected Firmware:- 3.000.0110.001  and versions below The Fixed Firmware:- 3.001.0031.001

EPSS 0.5%VulnerabilityCRESTRON#cwe-22Germany+5

A vulnerability exists in the ConsoleFindCommandMatchList function in libsymproc.so imported by ctpd that may lead to unauthorized execution of an attacker-defined file that gets prioritized by the ConsoleFindCommandMatchList. A third-party researcher discovered that the ConsoleFindCommandMatchList enumerates the /dev/shm/symproc/c directory in alphabetical order to identify console commands. Permission levels are inferred from the integer values present in each command's file name.  Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmware: 3.002.1061  Fixed Firmware: no fixed released (product is discontinued and end of life)   For x70   The Affected Firmware:- 3.000.0110.001  and versions below The Fixed Firmware:- 3.001.0031.001

EPSS 0.4%VulnerabilityCRESTRON#cwe-697Germany+6

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in CRESTRON TOUCHSCREENS x70 allows Argument Injection.This issue affects TOUCHSCREENS x70: from 3.001.0031.001 through 3.001.0034.001. A specially crafted SCP command sent via SSH login string can lead a valid administrator user to gain Privileged Operating System access on the device. Following Products Models are affected: TSW-x70 TSW-x60 TST-1080 AM-3000/3100/3200 Soundbar VB70 HD-PS622/621/402 HD-TXU-RXU-4kZ-211 HD-MDNXM-4KZ-E *Note: additional firmware updates will be published once made available

EPSS 0.4%VulnerabilityCRESTRON#cwe-88Germany+9

Multiple Crestron products have a command injection vulnerability via the file_transfer.cgi HTTP endpoint. This flaw allows a remote, unauthenticated attacker to execute operating system commands with root privileges. The vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.