CVE-2026-32296 - Vulnerability Analysis
HighCVSS: 8.2Last Updated: March 18, 2026
Sipeed NanoKVM - Broken Access Control
Overview
Sipeed NanoKVM < 2.3.1 contains an insecure Wi-Fi configuration endpoint caused by lack of proper security checks, letting unauthenticated attackers with network access change Wi-Fi settings or cause denial of service, exploit requires network access.
Severity & Score
Impact
Unauthenticated attackers can change Wi-Fi settings or cause denial of service by exhausting system memory.
Mitigation
Update to version 2.3.1 or later.
References
- https://eclypsium.com/blog/kvm-devices-the-keys-to-your-kingdom-are-hanging-on-the-network/
- https://github.com/sipeed/NanoKVM/blob/main/CHANGELOG.md#231-2025-12-26
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-076-01.json
- https://www.cve.org/CVERecord?id=CVE-2026-32296
Social Media Activity(5 posts)
š CVE-2026-32296 - High (8.2) Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a ... š https://www.thehackerwire.com/vulnerability/CVE-2026-32296/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postš CVE-2026-32296 - High (8.2) Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a ... š https://www.thehackerwire.com/vulnerability/CVE-2026-32296/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postš CVE-2026-32296 - High (8.2) Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a ... š https://www.thehackerwire.com/vulnerability/CVE-2026-32296/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postš CVE-2026-32296 - High (8.2) Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a ... š https://www.thehackerwire.com/vulnerability/CVE-2026-32296/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postš CVE-2026-32296 - High (8.2) Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a ... š https://www.thehackerwire.com/vulnerability/CVE-2026-32296/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postRelated Resources
Details
- CVE ID
- CVE-2026-32296
- Severity
- High
- CVSS Score
- 8.2
- Type
- broken_access_control
- Status
- unconfirmed
- EPSS
- 5.4%
- Social Posts
- 5
CWE
- CWE-306
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H