Which versions of SkyBridge MB-A100 are affected by EUVD-2026-40929?

Seiko Solutions SkyBridge MB-A100 and MB-A110 industrial LTE gateways contain an authenticated OS command injection vulnerability (CVSS 8.6) that allows compromised administrators to execute…

How to fix or mitigate EUVD-2026-40929?

Within 24 hours: Inventory all deployed SkyBridge MB-A100 and MB-A110 units in your environment and audit administrative access logs for suspicious activity. Within 7 days: Implement strict administrative access controls, enforce multi-factor authentication for gateway admin interfaces, and isolate gateway management networks. Within 30 days: Contact Seiko Solutions for a patch timeline; maintain a registry of affected devices and deploy additional network segmentation or replace units if compensating controls are insufficient.

SkyBridge MB-A100 EUVD-2026-40929

Q: What is the CVSS score of EUVD-2026-40929?

EUVD-2026-40929 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.1%.

| CVE-2026-50043 HIGH

OS Command Injection (CWE-78)

2026-07-01 jpcert

GHSA-5g5j-j2fm-vcpf

Command Injection Skybridge Mb A100 Mb A110

8.6

CVSS 4.0 · Vendor: jpcert

Severity by source

Vendor (jpcert) PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.2 HIGH

Network-reachable admin interface (AV:N/AC:L) but requires an administrative account (PR:H); command execution grants full OS control, so C/I/A all High with scope unchanged.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (jpcert).

CVSS VectorVendor: jpcert

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 08:32 vuln.today

CVSS changed

Jul 01, 2026 - 08:22 NVD

7.2 (HIGH) 8.6 (HIGH)

DescriptionCVE.org

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge MB-A100/MB-A110. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product with an administrative privilege.

AnalysisAI

Authenticated OS command injection in Seiko Solutions SkyBridge MB-A100 and MB-A110 industrial LTE gateways allows an attacker who is already logged in with administrative privileges to execute arbitrary operating-system commands on the device. The CVSS 4.0 base score is 8.6 (High), reflecting full confidentiality, integrity, and availability impact once admin access is obtained, though the PR:H requirement confines exposure to authenticated administrators. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.

Technical ContextAI

The affected products are the SkyBridge MB-A100/MB-A110, industrial-grade LTE/mobile communication routers/gateways from Seiko Solutions Inc. (cpe:2.3:a:seiko_solutions_inc.:skybridge_mb-a100/mb-a110). The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command), meaning device-management functionality passes user-supplied input into a system shell or command-execution routine without adequately neutralizing shell metacharacters. Such flaws are common in embedded network appliances whose web-based administration interfaces invoke underlying Linux/BusyBox utilities, where injected metacharacters (e.g. ;, |, &&, backticks) let an attacker append or chain arbitrary commands executed with the privileges of the management process.

RemediationAI

Apply the corrected firmware provided by Seiko Solutions; the specific patched version is not enumerated in the available data and must be obtained from the vendor advisory at https://www.seiko-sol.co.jp/archives/94618/ and the JVN entry https://jvn.jp/en/jp/JVN20721579/ (patch available per vendor advisory; released patched version not independently confirmed here). Until the device is updated, restrict the administrative management interface to a dedicated management VLAN or trusted-host allowlist and place the device behind a firewall so the admin interface is not exposed to untrusted or Internet-facing networks, with the trade-off that legitimate remote administration must then traverse a VPN. Change any default or shared administrator credentials, enforce strong unique passwords with account lockout, and enable logging and alerting on admin logins and configuration changes, since exploitation depends entirely on holding an administrative session; because the flaw requires admin privilege, tightening who can obtain that privilege is the most effective compensating control while patching.