CVE-2026-1626
—CVSS 3.1
9.1 critical
EPSS
<1%p10
Published
()
Modified
Description
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.
- Vendors
- sick
- Products
- lms1000 firmware, mrs1000 firmware
- Weakness
- CWE-327
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.