CVE-2026-2616CRITICAL 9.8EPSS p66.5%

CVE-2026-2616CVE-2026-2616

Description

A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is advisable to modify the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS1.29% probability of exploitation · percentile 66.5% · 2026-06-19T12:03:05Z
Published2026-02-17
Last modified2026-04-29

Underlying weaknesses· 2

CWE-259CWE-798

References

  1. https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc
  2. https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc#reproduction-steps
  3. https://vuldb.com/?ctiid.346266
  4. https://vuldb.com/?id.346266
  5. https://vuldb.com/?submit.751314

2

TypeTargetConfidenceTier
WeaknessUse of Hard-coded Passwordcwe-2590%live
WeaknessUse of Hard-coded Credentialscwe-7980%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-2617
CVE
CVE-2026-27507
CVE
CVE-2026-1610
CVE
CVE-2026-7690
CVE
CVE-2025-8730
CVE
CVE-2026-5509
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.