PT-2026-8250 · Unknown · Enet Smart Home Server

Gjoko Krstic · Published 2026-02-15 · Updated 2026-02-20 · CVE-2026-26366

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions eNet SMART HOME server versions 2.2.1 and 2.3.1

Description The eNet SMART HOME server is affected by a default credentials issue. The server ships with default credentials ('user:user', 'admin:admin') that remain active after installation and commissioning without requiring a password change. This allows unauthenticated attackers to gain administrative access to sensitive smart home configuration and control functions.

Recommendations Change the default credentials for both the 'user' and 'admin' accounts immediately after installation and commissioning.

Exploit

Fix

Weakness Enumeration

CWE-1392

Related Identifiers

CVE-2026-26366

Affected Products

Enet Smart Home Server

References · 12

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2026-5972.php · Exploit
• https://osv.dev/vulnerability/CVE-2026-26366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26366 · Security Note
• https://t.me/cveNotify/152066 · Telegram Post
• https://twitter.com/CVEnew/status/2023062014768099703 · Twitter Post
• https://twitter.com/cracbot/status/2024801258767602173 · Twitter Post
• https://twitter.com/DCWebGuy/status/2023213707153564113 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2023080733410001151 · Twitter Post
• https://twitter.com/DCWebGuy/status/2023215375211487558 · Twitter Post
• https://twitter.com/TheHackerWire/status/2023537812445032453 · Twitter Post
• https://t.me/CVEtracker/44772 · Telegram Post
• https://vulncheck.com/advisories/jung-enet-smart-home-server-use-of-default-credent · Note