Critical severity · published Jun 16, 2026
CVE-2026-22313
OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart Collector
9.1
CVSS
0.9%
EPSS
No
On KEV
Description
The device has a webserver that exposes a REST API authenticated with a token on the management network. By exploiting an OS command injection vulnerability an authenticated attacker can send
arbitrary commands to the device that are executed with administrative permissions by the underlying operating system.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
iSAP Smart Collector · Radiflow
3.07-1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-22313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-22313
www.cvcn.gov.it
https://www.cvcn.gov.it/cvcn/cve/CVE-2026-22313
More from iSAP Smart Collector
10.0
CVE-2025-3499
Unauthenticated execution of arbitrary commands in Radiflow iSAP Smart Collector
9.9
CVE-2025-3498
Unauthenticated modification of Radiflow iSAP Smart Collector configuration
8.7
CVE-2025-3497
Radiflow iSAP Smart Collector Linux distribution unmaintained
8.6
CVE-2026-22312
Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart Collector
6.8
CVE-2025-27028
Read access of deprivileged Radiflow iSAP Smart Collector user