{"id":"CVE-2026-70381","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-70381","generatedAt":"2026-10-28T04:34:17.526Z","title":"An access-control vulnerability has been identified in the web server configuration.","description":"An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface.\nThe accessible resources do not expose credentials or provide administrative functionality, but may include non-public device content, such as screen-saver content or assets used by the web interface.","published":"2026-10-26T20:18:36.000Z","lastModified":"2026-10-27T15:58:29.000Z","status":"Awaiting Analysis","sourceIdentifier":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","cvss":{"version":"4.0","score":6.9,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-290"],"affected":[],"epss":{"score":0.00256,"percentile":0.17071,"date":"2026-10-27","history":[{"date":"2026-10-27","score":0.00256,"percentile":0.17071}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-26T20:18:36.000Z","detail":{"score":"6.9","severity":"MEDIUM","publishedAt":"2026-10-26T20:18:35.973Z"},"summary":"New CVE, medium severity (CVSS 6.9)."}],"references":[{"url":"https://wolfvision.com/de/security/cve-2026-70381-1","source":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-70381","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}