CVE-2026-2333 is a critical command injection flaw (CVSS 9.8) in Owl Cyber Defense opds version 2.2.0.4. A crafted network request can inject commands. Nozomi Networks Labs, which published the advisory, suggests updating to Talon v3.0. Owners should confirm their exact model and upgrade path with the vendor.
What's affected
The record lists Owl opds 2.2.0.4 and the product family names opds-100, opds-1000 and opds-talon.
The Nozomi Networks advisory, issued 23 February 2026, says the issue affects Owl opds v2.2.0.4 and suggests updating to Talon v3.0. It does not give a long list of other affected versions, so confirm your version with Owl.
Owl Cyber Defense products are used at network boundaries where data moves between security zones, so owners tend to be in sensitive environments.
How to check if you're exposed
Read the software version from the device's management interface and compare it with 2.2.0.4. If the device runs that version, it is in scope.
Then check who can reach the management and data interfaces. A command injection reached through a network request is far less useful to an attacker if only trusted hosts can send requests to the device. Review firewall rules around the device and its management network.
If you are not sure what you run, ask Owl Cyber Defense support to confirm the version and the path to Talon v3.0 for your model.
What to do now
- Confirm the version on each Owl opds device.
- Plan the update to Talon v3.0 as the advisory suggests, with the vendor.
- Restrict network access to the device to the sources that need it.
- Review logs and configuration for unexpected changes while you wait.
Why it matters
The record lists CWE-77 (Command Injection). A crafted request reaches a command on the device without its special characters being neutralized, so an attacker can add commands. The vector in the record, network reachable, low complexity, no privileges, no user interaction, is why the score is 9.8. Nozomi lists a CVSS 4.0 score of 9.2 for the same issue.
Devices that sit between networks of different trust levels are high value targets, because compromising the gate affects the networks on both sides. Updates for these devices are often scheduled slowly. The record does not mark this CVE as exploited in the wild, and the advisory credits two Nozomi researchers for the discovery.
Quick check
What does the vendor suggest?
Nozomi Networks suggests updating to Talon v3.0.
Is there a second score?
Yes. Nozomi lists CVSS 4.0 at 9.2, while the NVD record shows 9.8 under CVSS 3.1.
Sources
Last reviewed: 19 October 2026.
