Details
- CVSS vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Published
- 9 September 2026
- Updated
- 15 October 2026
- Weakness
- CWE-306
CVE-2026-77974 CVE-2026-77974
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
CVSS base score
8.0
/10
High- CISA KEV
- Not listed
- Public exploit
- None known
- EPSS
- 0.27% chance of exploitation in 30 days