CVE-2026-116371
Akuvox Akubela HyPanel PS51 login improper authentication
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 26, 2026
- Updated
- Oct 27, 2026
- Reserved
- Oct 26, 2026
Description
A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R | VulDB |
| 2.0 | 7.5 High | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:ND/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-287 Improper Authentication
Affected Products
| Product | Versions |
|---|---|
Akubela HyPanel PS51Akuvox |
|
References
- VDB-426335 | Akuvox Akubela HyPanel PS51 login improper authenticationvdb-entrytechnical-description
- VDB-426335 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-116371 | CVE Analysis and Reportthird-party-advisory
- Submit #1013130 | Akubela (by Akuvox) HyPanel PS51 (Smart Home Control Panel / Intercom Gateway) 51.130.40.26 Authentication Bypass Using Alternate Channelthird-party-advisory
- https://github.com/wisklr/Authentication-Bypass-Vulnerability-in-akubela-HyPanel-PS51.gitbroken-link
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.