PatchTheCVECVE-2026-3323: An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sen
CVE-2026-3323 is a high-severity flaw (CVSS 7.5) affecting vegapuls 6x firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 65%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2026-04-28 |
| Last modified | 2026-10-26 |
Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-3323?
vegapuls 6x firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2026-3323 being exploited?
CVE-2026-3323 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-3323 affect?
CVE-2026-3323 affects vegapuls 6x firmware. Severity is high (CVSS 7.5). An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.
How urgent is CVE-2026-3323?
Priority 40/100. High severity; Remotely exploitable, no login, no user action