PT-2026-140264

CVE-2026-124578

Publicado

2026-11-09

Atualizado

2026-11-09

Descrição por

CVSS 2.0

5.0

Média

MétricasAV:N/AC:L/Au:N/C:P/I:N/A:N

A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Explorabilidade

Correção

Impactos

Pesquisadores

Joashs

Yaga Agent

Yagahs

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-306: Missing Authentication for Critical Function

CWE-287: Improper Authentication