CVE Catalog
CVE-2026-35075
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.47%
38th percentile - higher than 38% of all known CVEs
Summary
An unauthenticated remote attacker can recover a default, hard-coded password from a firmware image and gain full access to all affected devices.
Risk Assessment
An attacker can take control of all devices using the same firmware, potentially leading to a mass security breach.
Recommendation
Change the default password to a unique one for each device and update the firmware to not contain hard-coded passwords.
Original NVD description (English source)
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.