Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: METIS Cyberspace Technology SA Clear all filters
TI-2026-01896 CVE-2026-2249 · GHSA-3x5q-gxp5-wv27

Unauthenticated Remote Command Execution via Web Console in METIS DFS

Priority MEDIUM 50

METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2026-02-11 Fixed in oscore 2.1.235-r19 CWE-287
TI-2026-01895 CVE-2026-2248 · GHSA-cp3m-5wf6-4649

Unauthenticated Remote Root Shell Access via Web Console in METIS WIC

Priority MEDIUM 50

METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2026-02-11 Fixed in oscore 2.1.235-r19 CWE-287