CVE-2026-26048CWE-306
Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function
High · published February 20, 2026
What it is
The Wi-Fi router is vulnerable to de-authentication attacks due to the
absence of management frame protection, allowing forged deauthentication
and disassociation frames to be broadcast without authentication or
encryption. An attacker can use this to cause unauthorized disruptions
and create a denial-of-service condition.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00354 · 27.8th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2026-02-20T16:06Z
EPSS history
Timeline