cve.bz

CVE-2026-27662

7.0 highEPSS 0.1%

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.

CVSS 4.0
7.0CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS
0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-26)
CWE
CWE-1188
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON