EUVD-2026-72188
GHSA-8rh4-5q7c-x6qf
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable WebGUI with missing authentication and no user interaction gives AV:N/AC:L/PR:N/UI:N; arbitrary CLI execution yields high confidentiality and integrity, limited availability impact.
Primary rating from Vendor (NEC).
CVSS VectorVendor: NEC
Lifecycle Timeline
2DescriptionCVE.org
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.
AnalysisAI
Authentication bypass in the WebGUI of NEC's UNIVERGE IX-R/IX-V series network routers allows remote attackers to tamper with WebGUI messages and execute arbitrary CLI commands on the device without valid credentials. Because the affected management interface can be reached over the internet, an unauthenticated attacker can gain administrative-level command execution, effectively compromising the router's configuration and traffic-handling. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the device's WebGUI management interface be reachable by the attacker - the description explicitly states the attack is performed 'via internet,' so an internet-exposed or otherwise network-reachable WebGUI is the key prerequisite. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are consistent and point to genuine high priority: the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) indicates a network-reachable, low-complexity attack requiring no privileges and no user interaction, with high confidentiality and integrity impact (VC:H/VI:H) and low availability impact (VA:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fixed firmware provided by NEC as described in advisory nv26-005 (https://jpn.nec.com/security-info/secinfo/nv26-005_en.html); the exact patched version is not stated in the available data, so consult the advisory directly and treat this as 'Patch available per vendor advisory.' As a primary compensating control until patched, remove the WebGUI management interface from internet exposure - restrict management access to a dedicated management VLAN or VPN and block inbound access to the WebGUI ports from untrusted networks (side effect: administrators lose direct remote WebGUI access and must use the trusted management path). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, immediately restrict WebGUI management interface access to internal networks only by implementing firewall rules and access controls, and enable logging of all access attempts. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today