Industrial Sabotage Risk: Critical Airleader Flaw (CVSS 9.8) Exposed

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert regarding a critical security vulnerability in Airleader Master, a widely used compressor management system. Tracked as CVE-2026-1358, the flaw carries a near-maximum CVSS score of 9.8, signaling an immediate danger to industrial environments relying on this technology.

The vulnerability allows unauthenticated attackers to upload malicious files directly to the server, effectively handing them the keys to the system without requiring a password.

The core of the issue lies in how the software handles file inputs. Instead of rigorously checking what is being uploaded, the system leaves the door wide open.

According to the advisory, “Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges”.

This means an attacker doesn’t just get to put a file on the server; they get to execute it with the highest possible permissions. By uploading a web shell or malicious script, they can bypass security controls entirely. As the report warns, “Successful exploitation of this vulnerability could allow an attacker to obtain remote code execution”.

The fact that these webpages run with “maximum privileges” turns what might be a minor breach into a total system compromise. An attacker exploiting this flaw wouldn’t just be a guest on the network; they would be the administrator. This level of access could allow them to manipulate compressor settings, disrupt operations, or pivot to other critical systems within the operational technology (OT) network.

“This could allow an unauthenticated user to potentially obtain remote code execution on the server,” CISA states, highlighting that no login credentials are needed to launch the attack.

The vendor, Airleader GmbH, has released a fix to close this dangerous gap.

• Vulnerable: Airleader Master versions 6.381 and prior.
• Secure: Airleader Master version 6.386 or later.

Administrators are urged to apply the update immediately.

Related Posts:

• Hikvision HikCentral Master Lite and Professional Affected by Multi Vulnerabilities
• CVE-2023-20564 & CVE-2023-20560: AMD Ryzen Master Security Vulnerabilities
• AMD Ryzen Master Utility Vulnerable to DLL Hijacking (CVE-2024-21966)
• Kaspersky Report: Energy Industry becomes the largest area affected by vulnerabilities in industrial automation systems