EUVD-2026-75923
GHSA-46mh-97fq-r9vh
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent vector preserved from CVSS 4.0 input; PR:N matches unauthenticated auth bypass; full C/I/A reflects RCE with no scope change into subsequent systems.
Primary rating from Vendor (FSI).
CVSS VectorVendor: FSI
Lifecycle Timeline
2DescriptionCVE.org
Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0 allows Remote Code Inclusion.
This issue affects Zenius EMS 8.0: through OAM (Build 109).
AnalysisAI
Remote Code Inclusion in Brainzcompany Zenius EMS 8.0 (through OAM Build 109) is achievable by unauthenticated attackers on an adjacent network who bypass authentication via an alternate path or channel (CWE-288) compounded by improper syntactic input validation. The two-weakness combination allows an attacker to cause the server to include and execute attacker-controlled remote code, yielding full compromise of confidentiality, integrity, and availability. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to be on an adjacent network segment - the same LAN, VLAN, or broadcast domain as the Zenius EMS 8.0 OAM instance (AV:A per the reported CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 with AV:A/AC:L/AT:N/PR:N/UI:N reflects a high-severity but network-bounded threat - exploitation requires the attacker to be on the same LAN, VLAN, or broadcast domain as the target OAM interface, which materially limits opportunistic internet-scale exploitation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to contact Brainzcompany directly at brainz.co.kr to obtain a patched build of Zenius EMS 8.0 OAM superseding Build 109, as no vendor-released patch version or security bulletin has been independently confirmed from the available references. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: identify all Zenius EMS 8.0 deployments, document network topology and access paths, and assess whether systems are exposed to adjacent networks or untrusted network segments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today