{"id":"CVE-2026-26048","aliases":["EUVD-2026-8307","GHSA-3vr9-ghwq-fh8h"],"status":"published","title":"Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function","description":"The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management frame protection, allowing forged deauthentication\n and disassociation frames to be broadcast without authentication or \nencryption. An attacker can use this to cause unauthorized disruptions \nand create a denial-of-service condition.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00283,"percentile":0.21073,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2026-02-20T16:06:17Z","modified":"2026-06-17T10:25:38Z","products":[{"vendor":"jinan usr iot technology limited (pusr)","product":"usr-w610"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26048"},{"url":"https://github.com/advisories/GHSA-3vr9-ghwq-fh8h"}],"sources":{"cve":[{"id":"CVE-2026-26048","title":"Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function","description":"The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management frame protection, allowing forged deauthentication\n and disassociation frames to be broadcast without authentication or \nencryption. An attacker can use this to cause unauthorized disruptions \nand create a denial-of-service condition.","status":"published","published":"2026-02-20T16:06:17.626Z","modified":"2026-02-20T19:56:09.601Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T13:38:20.971157Z"}],"euvd":[{"id":"EUVD-2026-8307","description":"The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management frame protection, allowing forged deauthentication\n and disassociation frames to be broadcast without authentication or \nencryption. An attacker can use this to cause unauthorized disruptions \nand create a denial-of-service condition.","status":"published","published":"2026-02-20T16:06:17Z","modified":"2026-02-20T19:56:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T19:48:36.125178Z"}],"ghsa":[{"id":"GHSA-3vr9-ghwq-fh8h","title":"The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management...","description":"The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management frame protection, allowing forged deauthentication\n and disassociation frames to be broadcast without authentication or \nencryption. An attacker can use this to cause unauthorized disruptions \nand create a denial-of-service condition.","status":"published","published":"2026-02-20T18:31:39Z","modified":"2026-02-20T18:31:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:06:18.00539Z"}],"nvd":[{"id":"CVE-2026-26048","description":"The Wi-Fi router is vulnerable to de-authentication attacks due to the \nabsence of management frame protection, allowing forged deauthentication\n and disassociation frames to be broadcast without authentication or \nencryption. An attacker can use this to cause unauthorized disruptions \nand create a denial-of-service condition.","status":"published","published":"2026-02-20T17:25:53.45Z","modified":"2026-06-17T10:25:38.767Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:12:06.63895Z"}]}}