PT-2026-20334 · Beetel · Beetel 777Vr1

Raghav_2026 · CVE-2026-2616 · Published 2026-02-17 · Updated 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Beetel 777VR1 versions up to 01.00.09

Description A security issue exists in the Web Management Interface component of Beetel 777VR1. The issue involves hard-coded credentials, potentially allowing unauthorized access. The attack requires local network access. The exploit details have been publicly disclosed.

Recommendations Modify the configuration settings.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-259

CWE-798

Related Identifiers

CVE-2026-2616

Affected Products

Beetel 777Vr1

References · 12

• 🔥 https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc · Exploit
• 🔥 https://vuldb.com/?submit.751314 · Exploit
• 🔥 https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc#reproduction-steps · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-2616 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2616 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2023782688537104852 · Twitter Post
• https://vuldb.com/?ctiid.346266 · Note
• https://twitter.com/cracbot/status/2025526033836089657 · Twitter Post
• https://t.me/CVEtracker/44878 · Telegram Post
• https://vuldb.com/?id.346266 · Note
• https://twitter.com/CveFindCom/status/2023792325781033357 · Twitter Post
• https://twitter.com/CVEnew/status/2023791776436298051 · Twitter Post