PT-2026-21241 · Jinan Usr Iot Technology Limited · Usr-W610

Abhishek Pandey · CVE-2026-26049 · Published 2026-02-20 · Updated 2026-02-20

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The web management interface displays passwords in a plaintext input field, making them visible to anyone with access to the user interface. This could allow unauthorized observation of administrator credentials through methods like shoulder surfing, screenshots, or browser form caching.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2026-26049

Affected Products

Usr-W610

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-26049 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-050-03 · Note
• https://twitter.com/CVEnew/status/2024988803375792354 · Twitter Post