CVE-2026-50108

Name of the Vulnerable Software and Affected Versions Naxclow (affected versions not specified)

Description The platform API that returns device relay registration details fails to verify if the requester is the legitimate device or owner, exposing a persistent credential. An actor capable of presenting a platform-valid request signature can retrieve credentials for arbitrary devices and register on the relay as that device, which allows for the interception and disruption of communications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.