CVE-2026-16876 — NEC Corporation / UNIVERGE IX-R/IX-V

CVE-2026-16876

NEC Corporation / UNIVERGE IX-R/IX-V PUBLISHED

Description (CNA)

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.

Affected (CNA)

Vendor / product	Versions
NEC Corporation / UNIVERGE IX-R/IX-V	affected All versions from Ver1.1 through Ver1.3, All versions from Ver1.4.21 through Ver1.4.28 and Ver1.5.23

CWE

CWE-306

References

https://jpn.nec.com/security-info/secinfo/nv26-005_en.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.