【中文导读】Emoncms 存在远程代码执行、输入验证风险(高危风险)。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters including filename, port, baud_rate, core, and autoreset within the /admin/upload-custom-firmware endpoint.