Read the docs
TI-2026-65024 Aliases CVE-2026-100886GHSA-7mpp-mc8j-2fxx

Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

Priority HIGH 82CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 4.6.2.0 is sufficient to fix this issue. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01147 66th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed T8108 (Seetong): 4.6.2.0T8108P (Seetong): 4.6.2.0+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SeetongT81084.6.1.4-build2026042410114.6.2.0Patch availableCNA
SeetongT8108P4.6.1.4-build2026042410114.6.2.0Patch availableCNA
SeetongT81164.6.1.4-build2026042410114.6.2.0Patch availableCNA
SeetongT82324.6.1.4-build2026042410114.6.2.0Patch availableCNA
  • T8108 VendorSeetong Affected 4.6.1.4-build202604241011 Fixed in 4.6.2.0 Patch available CNA
  • T8108P VendorSeetong Affected 4.6.1.4-build202604241011 Fixed in 4.6.2.0 Patch available CNA
  • T8116 VendorSeetong Affected 4.6.1.4-build202604241011 Fixed in 4.6.2.0 Patch available CNA
  • T8232 VendorSeetong Affected 4.6.1.4-build202604241011 Fixed in 4.6.2.0 Patch available CNA

CPE names CNA · 4

CPEVersionsRoleVendor
cpe:2.3:a:seetong:t8108:*:*:*:*:*:*:*:*——Seetong
cpe:2.3:a:seetong:t8108p:*:*:*:*:*:*:*:*——Seetong
cpe:2.3:a:seetong:t8116:*:*:*:*:*:*:*:*——Seetong
cpe:2.3:a:seetong:t8232:*:*:*:*:*:*:*:*——Seetong
  • cpe:2.3:a:seetong:t8108:*:*:*:*:*:*:*:* Versions — — ·Seetong
  • cpe:2.3:a:seetong:t8108p:*:*:*:*:*:*:*:* Versions — — ·Seetong
  • cpe:2.3:a:seetong:t8116:*:*:*:*:*:*:*:* Versions — — ·Seetong
  • cpe:2.3:a:seetong:t8232:*:*:*:*:*:*:*:* Versions — — ·Seetong

Remediation

  • Fix · CNA T8108 (Seetong) Fixed in 4.6.2.0
  • Fix · CNA T8108P (Seetong) Fixed in 4.6.2.0
  • Fix · CNA T8116 (Seetong) Fixed in 4.6.2.0
  • Fix · CNA T8232 (Seetong) Fixed in 4.6.2.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-100886
  2. 2026-10-03 Alias added: GHSA-7mpp-mc8j-2fxx
  3. 2026-10-23 CVSS score changed · CNA
  4. 2026-10-23 Fix available: Seetong/[email protected], Seetong/[email protected], Seetong/[email protected] +1 · CNA
  5. 2026-10-23 1 new reference · CNA

References

Exploit 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences