CVE-2026-52481
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function.
Risk Assessment
An attacker can remotely exfiltrate sensitive data, potentially compromising user privacy and security.
Recommendation
Update the firmware to a newer version and restrict network access to the device.
Other vulnerabilities in SJRC F11 SJ-GPS-PRO
See all- CVE-2026-52482High
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet.
- CVE-2026-52480Medium
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service.
Original NVD description (English source)
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() function
Vulnerability data from NVD (NIST) · CISA KEV · EPSS