CVE-2026-2618
Beetel 777VR1 SSH Service risky encryption
- State
- Published
- Severity
- 6.3 Medium
- Published
- Feb 17, 2026
- Updated
- Feb 23, 2026
- Reserved
- Feb 17, 2026
Description
A vulnerability was determined in Beetel 777VR1 up to 01.00.09. This impacts an unknown function of the component SSH Service. This manipulation causes risky cryptographic algorithm. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.3 Medium | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R | VulDB |
| 3.0 | 3.7 Low | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R | VulDB |
| 2.0 | 2.6 Low | AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:W/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
777VR1Beetel |
|
References
- VDB-346268 | Beetel 777VR1 SSH Service risky encryptionvdb-entrytechnical-description
- VDB-346268 | CTI Indicators (IOB, IOC, TTP)signaturepermissions-required
- Submit #751633 | Beetel 777VR1 Firmware Versions: V01.00.09 / V01.00.09_55 Obsolete and Cryptographically Broken SSH Protocols CWE-327third-party-advisory
- https://gist.github.com/raghav20232023/8e8e559f80e2d596cb6154747f69a081related
- https://gist.github.com/raghav20232023/8e8e559f80e2d596cb6154747f69a081#proof--steps-to-reproduceexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.