PatchSiren cyber security CVE debrief

CVE-2026-5416 TURCK CVE debrief

CVE-2026-5416 is a high-severity command injection vulnerability in a Managed Ethernet Switch. A low-privileged remote attacker can exploit this vulnerability by improperly neutralizing special elements used in a name parameter, resulting in full system compromise. The vulnerability has a CVSS score of 8.7 and is classified as HIGH severity.

Vendor: TURCK
Product: TBEN-LL-SE-M2
CVSS: HIGH 8.7
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-16
Original CVE updated: 2026-06-16
Advisory published: 2026-06-16
Advisory updated: 2026-06-16

Who should care

Administrators and users of Managed Ethernet Switches should be aware of this vulnerability and take necessary actions to mitigate it.

Technical summary

The vulnerability is caused by improper neutralization of special elements used in a name parameter, allowing a low-privileged remote attacker to inject commands. The CVSS vector is CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

Defensive priority

HIGH

Recommended defensive actions

Apply patches or updates provided by the vendor to fix the vulnerability.
Restrict access to the Managed Ethernet Switch to only authorized personnel.
Monitor the system for suspicious activity.

Evidence notes

The vulnerability was reported by Certvde ([email protected]) and is tracked under VDE-2026-038.

Official resources

CVE-2026-5416 was published on 2026-06-16T10:16:28.857Z and has not been modified since then.