LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-28536

CVE-2026-28536 - Vulnerability Analysis

CriticalCVSS: 9.6

Last Updated: March 5, 2026

Device Authentication - Authentication Bypass

Published: March 5, 2026Updated: March 5, 2026

Overview

The device authentication module contains an authentication bypass vulnerability caused by improper authentication checks, letting attackers bypass authentication, exploit requires no special conditions.

Severity & Score

Severity: Critical
CVSS Score: 9.6

Impact

Attackers can bypass authentication, compromising system integrity and confidentiality.

Mitigation

Update to the latest version or apply vendor patches addressing authentication bypass.

Details

CVE ID
CVE-2026-28536
Severity
Critical
CVSS Score
9.6
Type
broken_authentication
Status
new

CWE

  • CWE-305

CVSS Metrics

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H