Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an malicious user to execute root commands.
enphase envoy_firmware d7.0.88