CVE-2019-20026

7.5 highEPSS 1.1%

High (7.5) in nec sv9100 firmware. EPSS 1.1% chance of exploitation in the next 30 days.

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
Published: 2020-07-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nec:sv9100_firmware

References

https://shadytel.su/files/nec_cve.txt
https://shadytel.su/files/nec_cve.txt

Check your stack JSON