PT-2026-140264

CVE-2026-124578

Published

2026-11-09

Updated

2026-11-09

Description by

CVSS 2.0

5.0

Medium

MetricsAV:N/AC:L/Au:N/C:P/I:N/A:N

A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.

Exploitability

Fix

Impacts

Researchers

Joashs

Yaga Agent

Yagahs

Vendors

Affected products

Weakness enumeration

CWE-306: Missing Authentication for Critical Function

CWE-287: Improper Authentication