CVE-2026-32296

Name of the Vulnerable Software and Affected Versions Sipeed NanoKVM versions prior to 2.3.1

Description Sipeed NanoKVM exposes a Wi-Fi configuration endpoint without appropriate security measures. An unauthenticated attacker with network access can modify the saved Wi-Fi network configuration to one of their choosing. Additionally, an attacker can create a request to deplete system memory and terminate the KVM process. The vulnerable endpoint is a Wi-Fi configuration endpoint. The network configuration can be altered by an attacker.

Recommendations Update Sipeed NanoKVM to version 2.3.1 or later.