Description
在 Tosei 自助洗衣机 4.02 版本中，/cgi-bin/tosei_datasend.php 文件存在命令注入漏洞。攻击者可以操控 adr_txt_1 参数进行恶意操作，触发系统执行任意命令。该漏洞可被远程利用，攻击者无需物理接触设备即可发起攻击。该漏洞的利用方式已经公开，并且厂商未作出任何回应。
Tosei Self-service Washing Machine /cgi-bin/tosei_datasend.php 命令执行漏洞（CVE-2026-2533）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2026-2533
https://nvd.nist.gov/vuln/detail/CVE-2026-2533
https://access.redhat.com/security/cve/cve-2026-2533
https://github.com/advisories/GHSA-4833-xmjg-923x
https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2026-2533
https://www.sentinelone.com/vulnerability-database/cve-2026-2533/
https://www.cve.org/CVERecord?id=CVE-2026-2533
https://www.redpacketsecurity.com/cve-alert-cve-2026-2533-tosei-self-service-washing-machine/
https://www.fortiguard.com/encyclopedia/ips/60417