CVE-2026-27662CWE-1188
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place
High · published May 12, 2026
What it is
Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place.
This could allow an unauthenticated attacker to gain unauthorized access to the web browser, potentially enabling the discovery of backdoors, performing unauthorized actions, or exploiting misconfigurations that may lead to further system compromise.
The record
Technical detail
- CVSS v4.0
- 7.0 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00166 · 5.6th percentile
- Weakness
- CWE-1188 · Initialization of a Resource with an Insecure Default
- Published
- 2026-05-12T08:21Z
EPSS history
Timeline