CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2025-26390
Severity
CRITICAL
CVSS
9.8
EPSS
0.61%
Original NVD Description
A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.
Related CVEs
Other vulnerabilities affecting the same vendor(s)