CVE-2026-1840
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk49th percentile — higher than 49% of all known CVEs
Summary
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication controls on critical system functions. This weakness allows attackers to modify configuration settings and trigger system restarts without restriction.
Risk Assessment
Unauthorized changes can disrupt normal system functionality, and if performed repeatedly, may lead to a loss of communications to the device.
Recommendation
It is recommended to implement appropriate authentication mechanisms for critical system functions to prevent unauthorized access.
Original NVD description (English source)
The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication controls on critical system functions. This weakness exposes essential configuration settings, allowing attackers to alter operational parameters and trigger system restarts without restriction. Such unauthorized changes can disrupt normal functionality and, if performed repeatedly, may lead to a loss of communications to the device.