CVE-2026-1364CWE-306

JNC|IAQS and I6 - Missing Authentication

Critical · published January 23, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
46.5
In the wild
Unconfirmed
What it is

🚨 Unauthenticated remote attackers can waltz right into your system and wield administrative powers! 🔥 Think of a secured building where anyone can just stroll in through an unguarded side door — that’s what this vulnerability is like. It’s as if the security guard took a coffee break and forgot to lock the main gate, leaving the key to the kingdom in plain sight! An attacker could directly control critical administrative functions, potentially leading to unauthorized access to sensitive data, manipulation of system settings, or even complete system takeover. This is a situation that could spiral into chaos, compromising the integrity and security of your entire infrastructure!

Put simply

Think of a secured building where anyone can just stroll in through an unguarded side door — that’s what this vulnerability is like. It’s as if the security guard took a coffee break and forgot to lock the main gate, leaving the key to the kingdom in plain sight! This vulnerability arises from a missing authentication mechanism in IAQS and I6 systems, allowing unauthenticated users to access and execute administrative functionalities without any credentials.

What to do

An attacker could directly control critical administrative functions, potentially leading to unauthorized access to sensitive data, manipulation of system settings, or even complete system takeover. This is a situation that could spiral into chaos, compromising the integrity and security of your entire infrastructure! Immediate action is essential! First, patch your systems to the latest version released by JNC that addresses this vulnerability. Additionally, review your system configurations to ensure strict authentication requirements are enforced for administrative actions. This is fixable! Stay proactive, follow these steps, and you'll have your system secured in no time. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00571 · 46.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-01-23T08:41Z
EPSS history
Timeline
  • 23 JAN 08:41Z
    JNC|IAQS and I6 - Missing Authentication
    cvelistv5