MEDIUM

CVE-2026-68953

2026-09-15 CVSS v3.1

CVSS

6.5

Description

The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTP(S) requests.

Weakness (CWE)

CWE-306 Missing Authentication

EPSS Score

0.37%

Probability of exploitation in next 30 days

31.3th percentile

References

https://digital-watchdog.com/downloads/ https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-258-01.json https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE