CVE-2019-11526: Softing Uagate Si Firmware

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

An issue was discovered in Softing uaGate SI 1.60.01. A maintenance script, that is executable via sudo, is vulnerable to file path injection. This enables the Attacker to write files with superuser privileges in specific locations.

Affected products

• Softing Uagate Si Firmware: version 1.60.01 only

Published 2019-10-10. Last modified 2026-06-17.