PT-2026-76802

CVE-2026-75108

·

Published

2026-08-17

·

Updated

2026-09-17

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Next Terminal (affected versions not specified)
Description Next Terminal fails to enforce per-asset authorization checks on the portal ping and wake-on-LAN endpoints. This allows any authenticated user to probe and wake assets they are not authorized to access by calling these endpoints with arbitrary asset identifiers. This can lead to the retrieval of asset information, such as display names, reachability status, connection timing, and network addresses, or the triggering of wake-on-LAN packets on unauthorized assets.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾