/Vulnerability Library

Neterbit NW-431F - Unauthenticated SMS Disclosure

CVE-2026-108578
Early Release

Description

Neterbit NW-431F 20250715 contains an information disclosure vulnerability caused by manipulation in /sms.json of the Embedded Web Server, letting remote attackers access sensitive information, exploit requires no special conditions.

Severity

Medium

CVSS Score

5.3

Exploit Probability

0%

Affected Product

nw-431f

Published Date

October 16, 2026

Template Author

0x_akoko

CVE-2026-108578.yaml
5.3Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVE ID:
cve-2026-108578
CWE ID:
cwe-200

References

https://github.com/KernelDotDLL/CVE-2026-108578https://vuldb.com/vuln/416235https://www.cve.org/CVERecord?id=CVE-2026-108578https://nvd.nist.gov/vuln/detail/CVE-2026-108578

Remediation Steps

Update to the latest version or apply vendor patches when available.