TI-2025-19367 CVE-2025-26410 · GHSA-jj4x-g447-hm4m
Weak hard-coded credentials in Wattsense Bridge
Priority HIGH 82
The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials.
Wattsense
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Wattsense records in CISA KEVNo Wattsense vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2025-19368 CVE-2025-26411 · GHSA-h9f9-r2j7-9685
Authenticated Arbitrary Python File Upload via Plugin Manager
Priority HIGH 73
An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device.
TI-2025-19366 CVE-2025-26409 · GHSA-9cmp-ppm3-hp8w
Access to Bootloader and Shell Over Serial Interface
Priority HIGH 65
A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices.
TI-2025-19365 CVE-2025-26408 · GHSA-hrwq-g9x9-jmq2
Unprotected JTAG Interface
Priority MEDIUM 62
The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB.