CVE-2026-14837CWE-347

SSH Enablement Signature Verification Bypass

High · published July 27, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00111 · 1.3th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-07-27T07:03Z
EPSS history
Timeline
  • 27 JUL 07:03Z
    SSH Enablement Signature Verification Bypass
    cvelistv5