Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: JUNG Component: Enet Smart Home Clear all filters
TI-2026-21313 CVE-2026-26368 · GHSA-f778-29c3-g295

JUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeover via resetUserPassword

Priority HIGH 73

eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows any authenticated low-privileged user (UG_USER) to reset the password of arbitrar…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00584 Published 2026-02-15 No fix listed CWE-862
TI-2026-21312 CVE-2026-26367 · GHSA-43f8-f3f2-rc3j

JUNG eNet SMART HOME server 2.2.1/2.3.1 Arbitrary User Deletion via deleteUserAccount

Priority MEDIUM 64

eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits any authenticated low-privileged user (UG_USER) to delete arbitrary user account…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0042 Published 2026-02-15 No fix listed CWE-862
TI-2026-21311 CVE-2026-26366 · GHSA-5cwq-67p7-h8hr

JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials

Priority HIGH 81

eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory password change.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00719 Published 2026-02-15 No fix listed CWE-1392