CVE-2026-22313: OS Commands Executed with Administrative Permissions in Radiflow iSAP Smart Collector

Synopsis

OS command injection in Radiflow iSAP Smart Collector (version 3.07-1) allows an authenticated attacker to send crafted requests to the device's REST API over the network. The CVSS vector confirms the attack is network-reachable and requires a high-privilege (admin-level) token, but no victim interaction is needed. Successful exploitation gives the attacker full OS-level command execution with administrative permissions, enabling complete confidentiality loss, data tampering, and service disruption. No fix version has been published; HarborGuard tracks this advisory and will make a patched-image rebuild available as soon as upstream releases one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the device's REST API over the network; the management network interface exposes the vulnerable endpoint remotely.

• AuthenticationRequired

  A high-privilege API token is required; the attacker must possess or steal an administrative credential to authenticate to the REST API.

• Victim interactionNot required

  No victim interaction is needed; the attacker sends crafted API requests directly without any user clicking or approving anything.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special race conditions or environmental prerequisites beyond holding a valid admin token.

Blast Radius

• The attacker executes arbitrary OS commands as the administrative user on the underlying operating system of the iSAP Smart Collector device.
• Full read access to all files and data on the device, including stored credentials, configuration secrets, and collected network telemetry.
• The attacker can write or delete files, modify device configuration, and alter collected OT/ICS data in place.
• The device can be crashed, rebooted, or rendered permanently unavailable, disrupting visibility into the operational technology network it monitors.