CRITICAL 9.3 NVD

CVE-2026-16876

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.

References

https://jpn.nec.com/security-info/secinfo/nv26-005_en.html

Published: 2026-09-07 · Source: NVD · Feed updated: 2026-09-07

This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-09-07 via NVD.

Risk Timeline

CVE Disclosed2026-09-07 · -1 days ago

Remediation Resources

Official Advisory

jpn.nec.com/security-info/secinfo/nv26-005_en.html

vulnfeed aggregates 9990 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.