CVE-2026-15570

Name of the Vulnerable Software and Affected Versions Telefunken TE24553B45V2DZ Smart TV versions prior to V2.85.2.0

Description Improper restriction of URL schemes and destinations in the SmartCenter browserseturl command allows an attacker on the same local network to force the embedded browser to send requests to unintended internal or loopback destinations, such as 127.0.0.1. This can enable access to internal services that are otherwise unreachable through standard browser navigation.

Recommendations Update to firmware version V2.85.2.0.