A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-6610P-DTA 1.2.1_20251110. This vulnerability affects the function nodered_lib_apply of the component Node-RED Library. Such manipulation of the argument act leads to command injection. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.2.4_20260821 is able to resolve this issue. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

A command injection vulnerability (CVE-2026-79698) was identified in multiple Advantech WISE-6610 series IoT gateway devices running firmware version 1.2.1_20251110. The flaw resides in the nodered_lib_apply function within the Node-RED Library component, where manipulation of the 'act' argument allows remote command injection. The vulnerability is remotely exploitable and a public exploit is available, raising the risk of active exploitation. All major WISE-6610 variants are affected, including NB, EB, TB, JB, CB, EL, and P-series models. Advantech was notified early and responded professionally, releasing a patched firmware version 1.2.4_20260821. Users are strongly advised to upgrade to the fixed version immediately. The coordinated disclosure reflects a positive vendor response to the reported issue.