CVE-2026-28536CWE-305

Authentication bypass vulnerability in the device authentication module

Critical · published March 5, 2026

CVSS v3.1
9.6
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2026-03-05T07:10Z
EPSS history
Timeline
  • 05 MAR 07:10Z
    Authentication bypass vulnerability in the device authentication module
    cvelistv5