AUGUST 5, 2026
Live Feed
Back to database
Case File

CVE-2025-26689

CRITICAL · CVSS 9.8 EPSS 1.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-31 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2025-26689
Severity
CRITICAL
CVSS
9.8
EPSS
1.12%

Original NVD Description

Direct request ('Forced Browsing') issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If a remote attacker sends a specially crafted HTTP request to the product, the product data may be obtained or deleted, and/or the product settings may be altered.