No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
Credit: Abhishek Pandey (Payatu Security Consulting); Abhishek Pandey, Ranit Pradhan (Payatu Security Consulting)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2026-25715 | CWE-521 Weak Password Requirements | 9.8 Critical |
The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty credentials over the web management interface and Telnet service. This effectively disables authentication across all critical management channels, allowing any network-adjacent attacker to gain full administrative control without credentials. CISA SSVC — Exploitation: None · Automatable: Yes Vendor fix: Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date. ↗ Affected, fixed & timelineAffected:
|
| CVE-2026-24455 | CWE-319 Cleartext Transmission of Sensitive Information | 7.5 High |
The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user credentials to passive interception by attackers on the same network. CISA SSVC — Exploitation: None · Automatable: Yes Vendor fix: Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date. ↗ Affected, fixed & timelineAffected:
|
| CVE-2026-26048 | CWE-306 Missing Authentication for Critical Function | 7.5 High |
The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of Management Frame Protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encryption. An attacker can use this to cause unauthorized disruptions and create a denial-of-service condition. CISA SSVC — Exploitation: None · Automatable: Yes Vendor fix: Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date. ↗ Affected, fixed & timelineAffected:
|
| CVE-2026-26049 | CWE-522 Insufficiently Protected Credentials | 5.7 Medium |
The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentially exposing administrator credentials to unauthorized observation via shoulder surfing, screenshots, or browser form caching. CISA SSVC — Exploitation: None · Automatable: No Vendor fix: Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2026-25715 | 9.8 Critical | Jinan USR IOT Technology Limited (PUSR) USR-W610 The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permi… |
| CVE-2026-24455 | 7.5 High | Jinan USR IOT Technology Limited (PUSR) USR-W610 The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but n… |
| CVE-2026-26048 | 7.5 High | Jinan USR IOT Technology Limited (PUSR) USR-W610 The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and… |
| CVE-2026-26049 | 5.7 Medium | Jinan USR IOT Technology Limited (PUSR) USR-W610 The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone wit… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.