CVE-2026-1840CWE-306

Missing authentication for critical function in Hubbell Aclara Metrum Cellular Web Interface

High · published June 24, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication controls on critical system functions. This weakness exposes essential configuration settings, allowing attackers to alter operational parameters and trigger system restarts without restriction. Such unauthorized changes can disrupt normal functionality and, if performed repeatedly, may lead to a loss of communications to the device.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00711 · 53.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-06-24T19:47Z
EPSS history
Timeline
  • 24 JUN 19:47Z
    Missing authentication for critical function in Hubbell Aclara Metrum Cellular Web Interface
    cvelistv5