{"id":"CVE-2026-6274","aliases":["EUVD-2026-34793","GHSA-848x-m5wp-rx2c"],"status":"published","title":"Authentication Bypass in DTS Electronics' Redline WR3200","description":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0046,"percentile":0.40151,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-1390","CWE-287","CWE-306"],"published":"2026-06-05T09:01:43Z","modified":"2026-07-23T07:10:00Z","exploits":[{"source":"pocgithub","id":"bugresearch/CVE-2026-6274","title":"bugresearch/CVE-2026-6274","date":"2026-05-11","url":"https://github.com/bugresearch/CVE-2026-6274"}],"products":[{"vendor":"dts electronics industry and trade ltd. co.","product":"redline wr3200"}],"references":[{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0321","tags":["government-resource"]},{"url":"https://github.com/bugresearch/CVE-2026-6274"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6274"},{"url":"https://github.com/advisories/GHSA-848x-m5wp-rx2c"}],"sources":{"cve":[{"id":"CVE-2026-6274","title":"Authentication Bypass in DTS Electronics' Redline WR3200","description":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8.","status":"published","published":"2026-06-05T09:01:43.955Z","modified":"2026-06-08T18:30:34.697Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-287","CWE-306","CWE-1390"],"updated_at":"2026-11-02T13:50:04.986624Z"}],"euvd":[{"id":"EUVD-2026-34793","description":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8.","status":"published","published":"2026-06-05T09:01:43Z","modified":"2026-06-08T18:30:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:48.375828Z"}],"ghsa":[{"id":"GHSA-848x-m5wp-rx2c","title":"Improper Authentication, Missing authentication for critical function, Weak Authentication...","description":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8.","status":"published","published":"2026-06-05T09:33:46Z","modified":"2026-06-08T21:31:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:08:39.337223Z"}],"nvd":[{"id":"CVE-2026-6274","description":"Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8.","status":"published","published":"2026-06-05T09:16:26.373Z","modified":"2026-07-23T07:10:00.113Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-287","CWE-306","CWE-1390"],"updated_at":"2026-11-02T14:12:22.371367Z"}]}}