{"affected":[{"product":"Akubela HyPanel PS51","source":"CNA: VulDB","vendor":"Akuvox","versions":[{"status":"affected","version":"51.130.40.26"}]}],"cveId":"CVE-2026-116371","cwes":["CWE-287"],"description":"A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. An official firmware patch is currently in development and will be released soon.","epss":{"date":"2026-11-09","percentile":0.34002,"score":0.00395},"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X","version":"4.0"},{"score":6.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C","version":"3.1"},{"score":6.3,"severity":"medium","source":"CNA: VulDB","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:C","version":"3.0"},{"score":7.5,"severity":"high","source":"CNA: VulDB","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:C","version":"2.0"}],"modifiedAt":1794237349432,"publishedAt":1793032218290,"references":[{"source":"CNA: VulDB","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/vuln/426335"},{"source":"CNA: VulDB","tags":["signature","permissions-required"],"url":"https://vuldb.com/vuln/426335/cti"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/cve/CVE-2026-116371"},{"source":"CNA: VulDB","tags":["third-party-advisory"],"url":"https://vuldb.com/submit/1013130"},{"source":"CNA: VulDB","tags":["broken-link"],"url":"https://github.com/wisklr/Authentication-Bypass-Vulnerability-in-akubela-HyPanel-PS51.git"}],"remediation":[],"revision":"18f4c10bbc712ab12f2022f9295ec84ea11f6be447e794b06da03dea02a38eb4","sources":[{"modifiedAt":1794237349432,"name":"CNA: VulDB","retrievedAt":1794240515356,"url":"https://www.cve.org/CVERecord?id=CVE-2026-116371"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794240552572,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-116371"}],"ssvc":{"assessedAt":1793043140665,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Akuvox Akubela HyPanel PS51 login improper authentication","updatedAt":1794240552572}