What is the CVSS score of CVE-2026-32296?

CVE-2026-32296 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H. EPSS exploitation probability: 0.1%.

Which versions of Nanokvm are affected by CVE-2026-32296?

Sipeed NanoKVM devices in your infrastructure face an authentication bypass vulnerability (CVE-2026-32296, CVSS 8.2) that allows unauthenticated attackers to hijack Wi-Fi configurations or crash…. A patch is available.

How to fix or mitigate CVE-2026-32296?

Within 24 hours: Inventory all Sipeed NanoKVM devices in your environment and identify those running versions before 2.3.1. Within 7 days: Apply vendor patch 2.3.1 or later to all affected devices, prioritizing production and critical infrastructure systems. Within 30 days: Conduct post-patch validation testing and implement network segmentation to restrict NanoKVM device access to trusted administrative networks only.

Nanokvm CVE-2026-32296

EUVD-2026-12610 HIGH

Missing Authentication for Critical Function (CWE-306)

2026-03-17 cisa-cg

Authentication Bypass Nanokvm

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 17, 2026 - 20:30 euvd

EUVD-2026-12610

Analysis Generated

Mar 17, 2026 - 20:30 vuln.today

Patch released

Mar 17, 2026 - 20:30 nvd

Patch available

CVE Published

Mar 17, 2026 - 17:19 nvd

HIGH 8.2

DescriptionCVE.org

Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate the KVM process.

AnalysisAI

A critical authentication bypass vulnerability in Sipeed NanoKVM KVM-over-IP devices allows unauthenticated remote attackers to hijack Wi-Fi configurations or crash the device through memory exhaustion. The vulnerability affects NanoKVM versions before 2.3.1 and enables attackers with network access to redirect the device to attacker-controlled networks or cause denial of service. While not currently in CISA KEV, the issue has been analyzed by security researchers and a patch is available from the vendor.

Technical ContextAI

The vulnerability affects Sipeed NanoKVM devices (CPE: cpe:2.3:a:sipeed:nanokvm:*:*:*:*:*:*:*:*), which are KVM-over-IP solutions that provide remote access to servers and computers. The root cause is CWE-306 (Missing Authentication for Critical Function), where the Wi-Fi configuration endpoint lacks proper authentication checks before processing configuration changes. NanoKVM devices are particularly sensitive as they provide remote access to critical infrastructure, making Wi-Fi hijacking especially dangerous since it could redirect KVM traffic through attacker-controlled networks.

RemediationAI

Upgrade Sipeed NanoKVM firmware to version 2.3.1 or later immediately, as documented in the vendor's changelog at https://github.com/sipeed/NanoKVM/blob/main/CHANGELOG.md#231-2025-12-26. Until patching is complete, isolate NanoKVM devices on dedicated management VLANs with strict firewall rules limiting access to authorized administrators only. Consider implementing network segmentation to prevent unauthorized access to the vulnerable Wi-Fi configuration endpoint and monitor for unexpected configuration changes or memory exhaustion indicators.