Fix for CVE-2026-59686, CVE-2026-59687, and CVE-2026-59688

Fixed an OS command injection vulnerability that allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance through the management interface, potentially resulting in complete system compromise

Refer to the following CVE details for more information.

Fix for CVE-2026-59689

Fixed an issue where an incorrect authorization vulnerability allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system compromise.

Refer to the CVE details for more information.

Fix for CVE-2026-59690

Fixed an authorization vulnerability that allows an authenticated attacker with low privileges to perform privileged administrative operations through the REST API that should not be accessible to their permission level, potentially resulting in a system compromise.

Refer to the CVE details for more information.