CVE-2026-24032CWE-347

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC)

Medium · published April 14, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC). The affected application contains an authentication weakness due to insufficient validation of user identity in the UMC component.

This could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to the application. (ZDI-CAN-27564)

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00251 · 15.5th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-04-14T08:40Z
EPSS history
Timeline
  • 14 APR 08:40Z
    A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC)
    cvelistv5