Akubela Hypanel Ps51
Monthly
Improper authentication in the Akubela HyPanel PS51 web login handler (firmware 51.130.40.26) lets a remote attacker reach an authenticated state by sending a request to /login with the engrmode argument set to 'admin'. Severity is moderate - CVSS v4.0 5.3 from the reporter, with an independent 3.1 assessment of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - and all three impact axes are rated low, so the resulting access may be limited rather than full device administration. A public proof-of-concept reference exists (a GitHub repository titled 'Authentication-Bypass-Vulnerability-in-akubela-HyPanel-PS51'), but it is not verified as working exploit code; no CISA KEV listing or EPSS score was supplied, and the vendor was contacted about the disclosure without responding, so no vendor patch is available.
Improper authentication in the Akubela HyPanel PS51 web login handler (firmware 51.130.40.26) lets a remote attacker reach an authenticated state by sending a request to /login with the engrmode argument set to 'admin'. Severity is moderate - CVSS v4.0 5.3 from the reporter, with an independent 3.1 assessment of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L - and all three impact axes are rated low, so the resulting access may be limited rather than full device administration. A public proof-of-concept reference exists (a GitHub repository titled 'Authentication-Bypass-Vulnerability-in-akubela-HyPanel-PS51'), but it is not verified as working exploit code; no CISA KEV listing or EPSS score was supplied, and the vendor was contacted about the disclosure without responding, so no vendor patch is available.