CVE-2019-20026

—

CVSS 3.1

7.5 high

EPSS

1%p64

Published

Jul 29, 2020 (Jul 29, 2020)

Modified

Jun 17, 2026

Description

The WebPro interface in NEC SV9100 software releases 7.0 or higher allows unauthenticated remote attackers to reset all existing usernames and passwords to default values via a crafted request.

Vendors: nec
Products: sv9100 firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.