AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-3832

CRITICAL · CVSS 9 EPSS 1.66% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-08-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-3832
Severity
CRITICAL
CVSS
9
EPSS
1.66%

Original Filing — NVD Description

An exploitable firmware update vulnerability exists in Insteon Hub running firmware version 1013. The HTTP server allows for uploading arbitrary MPFS binaries that could be modified to enable access to hidden resources which allow for uploading unsigned firmware images to the device. To trigger this vulnerability, an attacker can upload an MPFS binary via the '/mpfsupload' HTTP form and later on upload the firmware via a POST request to 'firmware.htm'.