CVE-2026-21411CWE-288

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and…

High · published January 6, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

⚡ An authentication bypass in OpenBlocks lets attackers sneak past admin gates like a mischievous raccoon in a trash can! 🔑 Think of it as a poorly guarded backstage pass that lets anyone with the right mindset change the show entirely. It’s like a guest slipping into the VIP area at a concert and altering the playlist without anyone noticing. This vulnerability could lead to unauthorized password changes, giving attackers full control over the admin account. Imagine losing access to your own event, with someone else calling the shots – it could be absolutely devastating!

Put simply

Think of it as a poorly guarded backstage pass that lets anyone with the right mindset change the show entirely. It’s like a guest slipping into the VIP area at a concert and altering the playlist without anyone noticing. In OpenBlocks versions prior to FW5.0.8, an attacker can exploit this flaw to bypass administrator authentication entirely, allowing them to change passwords and gain control over the system.

What to do

This vulnerability could lead to unauthorized password changes, giving attackers full control over the admin account. Imagine losing access to your own event, with someone else calling the shots – it could be absolutely devastating! Update OpenBlocks to version FW5.0.8 or later immediately. Additionally, review your authentication protocols to ensure no other loopholes are lurking. Regular audits can help keep your system secure! You've got this! By taking these steps, you’ll be locking down your admin access in no time. 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00373 · 30.0th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-01-06T06:34Z
EPSS history
Timeline
  • 06 JAN 06:34Z
    Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and…
    cvelistv5