CVE-2026-7786

critical · 9.8

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

9.8

CVSS

0.4%

EPSS (exploit prob.)

35th

EPSS percentile

2026-05-29

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-798

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-02.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-02

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-7786