What is CVE-2026-12059?

CVE-2026-12059 is a high-severity vulnerability in Cellopoint Celloos, classified under Improper Validation of Specified Quantity in Input. CVSS score: 8.8/10. Published 2026-06-12.

How severe is CVE-2026-12059?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Cellopoint Celloos

CVE-2026-12059

The SSH service of CelloOS developed by Cellopoint has an Improper Access Control vulnerability, allowing authenticated remote attackers to bypass the enforced command restrictions and execute operating system commands outside the original…

EPSS: 0.004 (36.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cellopoint Celloos — versions 0

Weakness classification (CWE)

CWE-1284 — Improper Validation of Specified Quantity in Input

References

twcert@cert.org.tw (third-party-advisory)
twcert@cert.org.tw (third-party-advisory)

Frequently asked questions

What is CVE-2026-12059?: CVE-2026-12059 is a high-severity vulnerability in Cellopoint Celloos, classified under Improper Validation of Specified Quantity in Input. CVSS score: 8.8/10. Published 2026-06-12.
How severe is CVE-2026-12059?: High severity. CVSS v3 base score is 8.8 out of 10.