Critical severity9.8NVD Advisory· Published May 29, 2026· Updated Jun 16, 2026

CVE-2026-7786

Description

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisagov/Csafreferences
USR IOT/USR-W610llm-create

Patches

Vulnerability mechanics

References

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-02.jsonnvd
www.cisa.gov/news-events/ics-advisories/icsa-26-148-02nvd

News mentions

CISA CSAF Batch: Nine ICS Vulnerabilities Spanning Maritime, Medical, and Surveillance Gear
Vypr Intelligence · May 29, 2026
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
CISA ICS Advisories

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000