Skip to content
OpenAdvisories
High · 8.8 CVE-2026-21411 EUVD-2026-1070GHSA-xm4x-3r5h-vwfr

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator auth…

Published Jan 6, 2026 · Updated Jan 6, 2026 · Assigned by jpcert

Description

Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password.

Affected products

VendorProductAffectedFixed
Plat'Home OpenBlocks IoT DX1 (FW5.0.x) all versions prior to FW5.0.8 —
Plat'Home OpenBlocks IoT EX/BX models (FW5.0.x) all versions prior to FW5.0.8 —
Plat'Home OpenBlocks IX9 models with FW (FW5.0.x) all versions prior to FW5.0.8 —
Plat'Home OpenBlocks IoT VX2 (FW5.0.x) all versions prior to FW5.0.8 —
Plat'Home OpenBlocks IDM RX1 (FW5.0.x) all versions prior to FW5.0.8 —
Plat'Home OpenBlocks IoT FX1 (FW5.0.x) all versions prior to FW5.0.8 —

References