CVE-2016-7806: I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS c...

Security readout for executives and security teams

This flaw affects I-O DATA WFS-SR01 devices running firmware 1.10 or earlier. A remote attacker may be able to execute OS commands on the device. That can turn a small network appliance into a foothold. Public sources do not provide CVSS, exploit details, or confirmed active exploitation. Exposure is limited to organizations or individuals using I-O DATA WFS-SR01 devices on firmware 1.10 or earlier. Risk rises if management or service interfaces are reachable from untrusted networks. The provided sources do not establish internet-wide exposure. Prioritize remediation where WFS-SR01 devices support business operations or are reachable from untrusted networks. The impact is potentially severe, but urgency is tempered by sparse public detail and no provided evidence of active exploitation. Mitigation focus: Inventory all I-O DATA WFS-SR01 devices and record firmware versions.; Check I-O DATA and JVN guidance for updates or vendor-approved mitigations.; Restrict device access to trusted internal networks only..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.