CVE-2026-82488
LowCVSS 3.5Summary
A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting the User Management component. Manipulating the Username argument leads to cross site scripting. The attack can be carried out remotely, and the exploit is publicly available. The vendor did not respond.
Risk Assessment
The risk includes remote XSS attacks, potentially leading to session theft or malicious script execution in the browser.
Recommendation
It is recommended to restrict access to the device and apply patches if available, as well as filter input data.
Other vulnerabilities in Beetel 450TC3
See all- CVE-2026-82487Medium
A vulnerability was identified in Beetel 450TC3 01.00.00_01, affecting an unknown part. Manipulation can lead to weak password recovery. The attack can be executed remotely, and the exploit has been publicly disclosed. The vendor did not respond.
- CVE-2020-25498Medium
A Cross Site Scripting (XSS) vulnerability in the Beetel router 777VR1 can be exploited via the NTP server name in System Time and the "Keyword" field in URL Filter.
Original NVD description (English source)
A vulnerability was identified in Beetel 450TC3 01.00.00_01. This vulnerability affects unknown code of the component User Management. The manipulation of the argument Username leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.