Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-16876 EUVD-2026-72188GHSA-8rh4-5q7c-x6qf

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute ar…

Published Sep 7, 2026 · Updated Sep 8, 2026 · Assigned by NEC

Vendor: NEC Product: UNIVERGE IX-R/IX-V

Description

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.

Affected products

VendorProductAffectedFixed
NEC UNIVERGE IX-R/IX-V All versions from Ver1.1 through Ver1.3, All versions from Ver1.4.21 through Ver1.4.28 and Ver1.5.23 —

References