CVE-2026-32646 - Vulnerability Analysis

Overview

A device management product contains a broken access control vulnerability caused by an administrative endpoint accessible without proper authentication, letting attackers access device management functions without authorization, exploit requires no special privileges.

Severity & Score

Impact

Attackers can access and manipulate device management functions without authorization, potentially compromising device security and control.

Mitigation

Restrict access to the administrative endpoint by implementing proper authentication and authorization controls.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-055-03.json
• https://mygardyn.com/security/
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-055-03

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner