CVE-2026-16876 | BDVDB-2026-368697 Detail
NECUNIVERGE IX-R/IX-V
Description#
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact low. Attack vector: network.
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.