Home / Vulnerability Intelligence / CVE-2026-2624

CVE-2026-2624 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: February 26, 2026

ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall - Authentication Bypass

Published: February 25, 2026Updated: February 26, 2026Remote Exploitable

Overview

ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) >= 2.0.1298 and < 2.0.1301 contains an authentication bypass caused by missing authentication for critical functions, letting attackers bypass authentication, exploit requires no special privileges.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 7.8%(Probability of exploitation in next 30 days)

Impact

Attackers can bypass authentication, gaining unauthorized access to critical functions, potentially compromising the system.

Mitigation

Upgrade to version 2.0.1301 or later.

References

https://www.usom.gov.tr/bildirim/tr-26-0082

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 25, 2026

🔴 CVE-2026-2624 - Critical (9.8) Missing Authentication for Critical Function vulnerability in ePati Cyber Security Technologies Inc. Antikor Next Generation Firewall (NGFW) allows Authentication Bypass.This issue affects Antikor Next Generation Firewall (NGFW): from v.2.0.... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-2624/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-2624
Severity: Critical
CVSS Score: 9.8
Type: broken_authentication
Status: confirmed
EPSS: 7.8%
Social Posts: 1

CWE

CWE-306

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

7.8%Probability of exploitation in the next 30 days