PT-2026-8250 · Unknown · Enet Smart Home Server

Gjoko Krstic · Publicado 2026-02-15 · Atualizado 2026-02-20 · CVE-2026-26366

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eNet SMART HOME server versions 2.2.1 and 2.3.1

Description The eNet SMART HOME server is affected by a default credentials issue. The server ships with default credentials ('user:user', 'admin:admin') that remain active after installation and commissioning without requiring a password change. This allows unauthenticated attackers to gain administrative access to sensitive smart home configuration and control functions.

Recommendations Change the default credentials for both the 'user' and 'admin' accounts immediately after installation and commissioning.

Exploit

Correção

Enumeração de Fraquezas

CWE-1392

Identificadores relacionados

CVE-2026-26366

Produtos afetados

Enet Smart Home Server

Referências · 12

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2026-5972.php · Exploit
• https://osv.dev/vulnerability/CVE-2026-26366 · Aviso do Fabricante
• https://t.me/cveNotify/152066 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2023062014768099703 · Publicação no Twitter
• https://twitter.com/cracbot/status/2024801258767602173 · Publicação no Twitter
• https://twitter.com/DCWebGuy/status/2023213707153564113 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2023080733410001151 · Publicação no Twitter
• https://twitter.com/DCWebGuy/status/2023215375211487558 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2023537812445032453 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-26366 · Nota de Segurança
• https://t.me/CVEtracker/44772 · Publicação no Telegram
• https://vulncheck.com/advisories/jung-enet-smart-home-server-use-of-default-credent · Nota