Skip to content
OpenAdvisories

Vendor

JUNG

7 known vulnerabilities.

Products

eNet SMART HOME server 4 Smart Visu Server 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-26369

    JUNG eNet SMART HOME server 2.2.1/2.3.1 Privilege Escalation via setUserGroup

    eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the setUserGroup JSON-RPC method. A low-privileged user (UG_USER) can send a crafted POST request to /jsonrpc/management specifyin…

    JUNG eNet SMART HOME server
  • High 8.8
    CVE-2026-26368

    JUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeover via resetUserPassword

    eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG_USER) to reset the password of arbitrary accounts, including those in the UG_A…

    JUNG eNet SMART HOME server
  • High 8.1
    CVE-2026-26367

    JUNG eNet SMART HOME server 2.2.1/2.3.1 Arbitrary User Deletion via deleteUserAccount

    eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits any authenticated low-privileged user (UG_USER) to delete arbitrary user accounts, except for the built-in admin accoun…

    JUNG eNet SMART HOME server