VYPR

eNet SMART HOME server

by Jung

CVEs (1)

  • CVE-2026-26368HigFeb 15, 2026
    risk 0.57cvss 8.8epss 0.01

    eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG_USER) to reset the password of arbitrary accounts, including those in the UG_ADMIN and…