CVE-2026-2616
HIGHCVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is advisable to modify the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.
Analysis
Hard-coded credentials in the Beetel 777VR1 Web Management Interface allow unauthenticated attackers on the local network to gain full administrative access with high integrity and confidentiality impact. Public exploit code is available and actively used, with no patch currently available from the vendor. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Conduct inventory of all Beetel 777VR1 devices in production and immediately restrict network access to the Web Management Interface through firewall rules. Within 7 days: Implement network segmentation to isolate affected routers from critical systems and enable detailed logging/monitoring for suspicious activity on these devices. …
Sign in for detailed remediation steps.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today