CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-104076 — TVU Networks Receiver/Transceiver devices running firmware before version 7.9 co...

·Source: NIST NVD

Updated:

Executive Summary

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read sensitive device information and modify device configuration via unprotected REST API endpoints on port 8288. Attackers can send unauthenticated GET requests to disclose network configuration, firmware details, and cloud s

Analysis

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read sensitive device information and modify device configuration via unprotected REST API endpoints on port 8288. Attackers can send unauthenticated GET requests to disclose network configuration, firmware details, and cloud service information, or issue POST requests to endpoints such as /Setting3/API/API/v1/LocalNetwork/DNS to alter DNS settings and enable man-in-the-middle attacks on outbound connections to TVU cloud infrastructure. CVSS Score: 9.1. Published: 2026-10-08T20:17:29.543.

Indicators of Compromise (1)

CVE (1)
CVE-2026-104076
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

23andMe successor settles with California for $6 million over cybersecurity failings

California Attorney General Rob Bonta announced a settlement under which 23andMe's successor will pay $6 million to resolve allegations that the company did not properly protect customers' data before a 2023 breach.

The Record
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-113802 — Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command inj...

Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen(). A remote unauthenticated attacker can send a forged IP-FROM: 127.0.0.1 header to bypass login and execute arbitrary commands as root.

CVE-2026-113802
NIST NVD
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-113506 — A vulnerability has been found in aaPanel up to 8.25.0. The affected element is ...

A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipulation of the argument sfile/dfile/access/user leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor confirms: "The repo

CVE-2026-113506
NIST NVD