PT-2026-7476 · Jung · Jung Smart Panel Knx

Gjoko Krstic · Publicado 2026-02-10 · Atualizado 2026-02-11 · CVE-2026-25872

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JUNG Smart Panel KNX firmware versions prior to L1.12.22

Description The JUNG Smart Panel KNX firmware does not properly validate file path input in its embedded web interface. This allows remote, unauthenticated attackers to access arbitrary files on the underlying filesystem within the context of the web server. Successful exploitation may lead to the disclosure of system configuration files and other sensitive information. The vulnerable component is the embedded web interface.

Recommendations Update the JUNG Smart Panel KNX firmware to a version later than L1.12.22.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-25872

Produtos afetados

Jung Smart Panel Knx

Referências · 8

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2026-5969.php · Exploit
• https://t.me/CVEtracker/44362 · Publicação no Telegram
• https://downloads.jung.de/public/en/pdf/productdocumentation/en_sp5.1knx_09012015.pdf · Nota
• https://twitter.com/VulmonFeeds/status/2021416509000585428 · Publicação no Twitter
• https://jung-group.com · Nota
• https://twitter.com/CVEnew/status/2021365279360536906 · Publicação no Twitter
• https://vulncheck.com/advisories/jung-smart-panel-knx-unauthenticated-path-traversal · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-25872 · Nota de Segurança