CVE-2026-35075
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
An unauthenticated remote attacker can recover a default, hard-coded password from a firmware image and gain full access to all affected devices.
Risk Assessment
An attacker can take control of all devices using the same firmware, potentially leading to a mass security breach.
Recommendation
Change the default password to a unique one for each device and update the firmware to not contain hard-coded passwords.
Other vulnerabilities in Firmware
See all- CVE-2026-44094High
An unauthenticated remote attacker can force the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted.
- CVE-2026-9650High
CWE-522 Insufficiently Protected Credentials vulnerability allows an unauthenticated attacker to access credentials stored in firmware or system files. This can lead to unauthorized access and exposure of sensitive information, and with physical access to the device, full compromise.
Original NVD description (English source)
An unauthenticated remote attacker can recover a default, hard coded password from a firmware image and thus gain full access to all affected devices.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS