CVE-2026-26049 — Jinan USR IOT Technology Limited (PUSR) USR-W610 Insufficiently Protected Credentials
The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentia…
Published: 2026-02-20 · CVSS: 5.7 · CVSS 3.1
The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentially exposing administrator credentials to unauthorized observation via shoulder surfing, screenshots, or browser form caching.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7