{"id":"CVE-2026-13211","aliases":["EUVD-2026-41051","GHSA-296j-g5j7-v64q"],"status":"published","title":"Genucenter Disclosure of SNMP Credentials","description":"The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00167,"percentile":0.06074,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-201"],"published":"2026-07-01T15:46:25Z","modified":"2026-10-25T17:10:00Z","products":[{"vendor":"genua","product":"genucenter"}],"references":[{"url":"https://github.com/sbaresearch/advisories/tree/public/2026/SBA-ADV-20260424-01_Genucenter_Disclosure_of_SNMP_Credentials","tags":["third-party-advisory","exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-13211"},{"url":"https://github.com/advisories/GHSA-296j-g5j7-v64q"}],"sources":{"cve":[{"id":"CVE-2026-13211","title":"Genucenter Disclosure of SNMP Credentials","description":"The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.","status":"published","published":"2026-07-01T15:46:25.174Z","modified":"2026-07-01T17:47:08.068Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:19:49.885652Z"}],"euvd":[{"id":"EUVD-2026-41051","description":"The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.","status":"published","published":"2026-07-01T15:46:25Z","modified":"2026-07-01T17:47:08Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:19.066641Z"}],"ghsa":[{"id":"GHSA-296j-g5j7-v64q","title":"The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP...","description":"The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.","status":"published","published":"2026-07-01T18:31:51Z","modified":"2026-07-01T18:31:58Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T15:09:09.679694Z"}],"nvd":[{"id":"CVE-2026-13211","description":"The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.","status":"published","published":"2026-07-01T17:16:19.74Z","modified":"2026-10-25T17:10:00.197Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:12:27.199837Z"}]}}