CVE-2026-61516CWE-522

CVE-2026-61516

Critical · published September 8, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the exposed credential against the login handler to establish a fully authenticated administrator session on the device.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00709 · 53.0th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-09-08T19:18Z
References (4)
https://hackwithmike.com/research/advisories/netis/cve-2026-61516 · [email protected]https://hackwithmike.com/research/netis/2026-09 · [email protected]https://www.netis-systems.com/products/NX10.html · [email protected]https://www.vulncheck.com/advisories/netis-nx10-credential-disclosure-via-sysinfo-diagnostic-endpoint · [email protected]
EPSS history
Timeline
  • 10 SEP 03:17Z
    EPSS moved — → 0%
    epss
  • 08 SEP 14:23Z
    Netis NX10 Credential Disclosure via sysinfo Diagnostic Endpoint
    cvelistv5