CVE-2026-50209

HighCVSS 7.8/10Last modified Jul 22, 2026

Description

Broadcast events allow malicious software to rewrite the device's default Mobile Device Management (MDM) endpoint address, shifting administrative ownership to an external attacker.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Jun 4, 2026
Last modified
Jul 22, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-50218.8A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the componCVE-2026-502107.5The device encrypts data using AES-CBC with static zero-filled Initialization Vectors (IVs), making it susceptible to replay attacks and knoCVE-2026-502119.8Leftover engineering diagnostics and factory-level diagnostic software remain exposed on retail builds, giving malicious apps write privilegCVE-2026-502126.5Weak validation logic within device dissociation API routines allows a remote entity to forcefully unbind unrelated user endpoints, causing CVE-2026-502137.5The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictaCVE-2026-502149.8The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-coCVE-2026-502154.4A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPvCVE-2026-502165.3An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore PlatforCVE-2026-502174.7A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged useCVE-2026-502188.5Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a CVE-2026-502195.9libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_GetBuffer, XML_Parse, XML_ParseBuffer, XML_ParserFree, or XML_ParseCVE-2026-50225.3The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthen