Vulnerability details

CVE-2026-26048

Jinan USR IOT Technology Limited (PUSR) USR-W610

Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function

CVSS 3.1
7.5High

Official description

The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encryption. An attacker can use this to cause unauthorized disruptions and create a denial-of-service condition.

CVSS scores

ScoreVersionSourceVector
7.5High 3.1 CVEProject cvelistV5 (CNA) (icscert) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

VendorProductVersionsSource
Jinan USR IOT Technology Limited (PUSR) USR-W610 v ≤ 3.1.1.0 CVEProject cvelistV5 (CNA)

References and advisories

2
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-02-20
Last updated
2026-02-20
State
Published
Assigner (CNA)
icscert

Exploit prediction (EPSS)

0.28%
Probability of exploitation in 30 days
20.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-306