Read the docs

JUNG

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

JUNG records in CISA KEV

No JUNG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Visu Server Firmware 5 records HIGH Enet Smart Home 4 records HIGH

Records

4 records in Enet Smart Home · all components

TI-2026-21311 CVE-2026-26366 · GHSA-5cwq-67p7-h8hr

JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials

Priority HIGH 81

eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory password change.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00719 Published 2026-02-15 No fix listed CWE-1392
TI-2026-21313 CVE-2026-26368 · GHSA-f778-29c3-g295

JUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeover via resetUserPassword

Priority HIGH 73

eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG_USER) to reset the password of arbitrar…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00584 Published 2026-02-15 No fix listed CWE-862
TI-2026-21312 CVE-2026-26367 · GHSA-43f8-f3f2-rc3j

JUNG eNet SMART HOME server 2.2.1/2.3.1 Arbitrary User Deletion via deleteUserAccount

Priority MEDIUM 64

eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits any authenticated low-privileged user (UG_USER) to delete arbitrary user account…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0042 Published 2026-02-15 No fix listed CWE-862
Open these records in search →