CVE-2026-32296
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint
Summary
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint
Original description
The description as published by the source.
Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate the KVM process.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web raw.githubusercontent.com
- web cve.org
- web eclypsium.com