CVE-2026-21639
Severity CVSS v4.0:
Pending analysis
Type:
CWE-77
Command Injection
Publication date:
08/01/2026
Last modified:
08/01/2026
Description
A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.<br />
<br />
<br />
<br />
Affected Products:<br />
<br />
airMAX AC (Version 8.7.20 and earlier)<br />
airMAX M (Version 6.3.22 and earlier)<br />
airFiber AF60-XG (Version 1.2.2 and earlier)<br />
airFiber AF60 (Version 2.6.7 and earlier)<br />
<br />
<br />
<br />
Mitigation:<br />
<br />
Update your airMAX AC to Version 8.7.21 or later.<br />
Update your airMAX M to Version 6.3.24 or later.<br />
Update your airFiber AF60-XG to Version 1.2.3 or later.<br />
Update your airFiber AF60 to Version 2.6.8 or later.
Impact
Base Score 3.x
5.40
Severity 3.x
MEDIUM