CVE-2026-3356CWE-306

Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor

Critical · published March 31, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

The MS27102A Remote Spectrum Monitor is vulnerable to an authentication bypass that allows unauthorized users to access and manipulate its management interface. Because the device provides no mechanism to enable or configure authentication, the issue is inherent to its design rather than a deployment error.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00577 · 46.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-03-31T18:40Z
EPSS history
Timeline
  • 31 MAR 18:40Z
    Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor
    cvelistv5