CVE-2026-2616
Beetel 777VR1 Web Management hard-coded credentials
- State
- Published
- Severity
- 8.7 High
- Published
- Feb 17, 2026
- Updated
- Feb 23, 2026
- Reserved
- Feb 17, 2026
Description
A vulnerability has been found in Beetel 777VR1 up to 01.00.09. The impacted element is an unknown function of the component Web Management Interface. The manipulation leads to hard-coded credentials. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is advisable to modify the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 8.8 High | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R | VulDB |
| 3.0 | 8.8 High | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:R | VulDB |
| 2.0 | 8.3 High | AV:A/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
777VR1Beetel |
|
References
- VDB-346266 | Beetel 777VR1 Web Management hard-coded credentialsvdb-entrytechnical-description
- VDB-346266 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #751314 | Beetel 777VR1 Firmware Versions: V01.00.09 / V01.00.09_55 CWE-521, CWE-307third-party-advisory
- https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afcrelated
- https://gist.github.com/raghav20232023/d8dcaaa76e71790f77f8d3ea714d2afc#reproduction-stepsexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.