High severity8.0NVD Advisory· Published Sep 9, 2026· Updated Sep 10, 2026
CVE-2026-77974
CVE-2026-77974
Description
After spoofing the device and obtaining one user confirmation, an attacker may be able to cause the application to transmit firmware through an unauthenticated and unsigned update channel.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- 24 Vulnerabilities Disclosed Across Multiple Products: Authentication, Injection, and Credential Flaws ExposedVypr Intelligence · Sep 11, 2026