CVE-2026-2616

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is advisable to modify the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-259CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Feb 17, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-261607.8Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privilegesCVE-2026-261617.8Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.CVE-2026-261627.8Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.CVE-2026-261637.8Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-261647.5Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclCVE-2026-261657.0Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.CVE-2026-261667.0Double free in Windows Shell allows an authorized attacker to elevate privileges locally.CVE-2026-261677.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorizCVE-2026-261687.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSockCVE-2026-261696.1Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.CVE-2026-26178.8A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Service/SSH Service. TheCVE-2026-261707.8Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.