CVE-2026-13211

Genucenter Disclosure of SNMP Credentials

State: Published
Severity: 4.3 Medium
Published: Jul 1, 2026
Updated: Jul 1, 2026
Reserved: Jun 24, 2026

Description

The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	sba-research

Weaknesses

CWE-201 Insertion of sensitive information into sent data

Affected Products

Product	Versions
genucentergenua	8.0 through 8.0p10Affected 8.0p11 to before 8.1Not affected 8.6Not affected

References

https://github.com/sbaresearch/advisories/tree/public/2026/SBA-ADV-20260424-01_Genucenter_Disclosure_of_SNMP_Credentialsthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.