PT-2026-48830 · Celloos · Celloos

Published 2026-06-12 · Updated 2026-06-12 · CVE-2026-12059

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CelloOS (affected versions not specified)

Description The SSH service contains an improper access control issue. This allows authenticated remote attackers to bypass enforced command restrictions and execute operating system commands outside of the originally authorized scope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Isolate affected systems immediately.

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-12059

Affected Products

Celloos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-12059 · Security Note
• https://twcert.org.tw/tw/cp-132-10966-3258e-1.html · Note
• https://twitter.com/HugoValters/status/2065375195037073628 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2065345348436955326 · Twitter Post
• https://twcert.org.tw/en/cp-139-10965-3ce75-2.html · Note