CVE-2026-43847
HighCVSS 8.2Summary
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
Risk Assessment
An attacker may crack the administrator password via brute force and gain unauthorized administrative access to the system.
Recommendation
Update the software to a patched version and implement additional login attempt throttling mechanisms.
Other vulnerabilities in Nieznany komponent
See all- CVE-2026-43858High
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43857High
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
- CVE-2026-43856High
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
- CVE-2026-43855High
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43853High
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
- CVE-2026-43852High
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
- CVE-2026-43851High
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
- CVE-2026-43850High
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
- CVE-2026-43846High
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
Original NVD description (English source)
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS