CVE-2026-27662CWE-1188

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place

High · published May 12, 2026

CVSS v4.0
7.0
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place.

This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2026-05-12T08:21Z
EPSS history
Timeline
  • 12 MAY 08:21Z
    Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place
    cvelistv5