Join us at Spark 2026 - Nozomi Networks' Customer Conference!
Sign Up
CVE-2026-73169
Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus transaction management interface.
A remote authenticated attacker may store malicious script content that executes in the browser of any administrator who later opens an affected management page
September 16, 2026
This issue affects: Advantech EKI-1242IEIMS and EKI-1242EIMS in firmware version V1.06.01.
CVE-2026-73169
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H
6.3
Update to firmware version 2.00.01.
Simone Bossi at Nozomi Networks
Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.
Learn more
