CVE-2026-22916CWE-266

An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially…

Medium · published January 15, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.9th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-01-15T13:07Z
EPSS history
Timeline
  • 15 JAN 13:07Z
    An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially…
    cvelistv5