VulnSocial

CVE-2026-2250Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is configured with debug mode enabled, causing malformed requests to return verbose Django tracebacks that disclose backend source code, local file paths, and system configuration.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-215CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-11: 2Technical Details · 2026-02-11: 202-11
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-2250 The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database conta… https://www.cve.org/CVERecord?id=CVE-2026-2250

    Post summary

    CVE-2026-2250 exposes an unauthenticated /dbviewer/ endpoint on METIS WIC devices, enabling remote attackers to export the internal telemetry SQLite database. No PoC, exploit code, patch, or active exploitation evidence is mentioned.

    00020382
    56.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-2250 Unauthenticated Database Exposure and Information Disclosure in METIS WIC Devices https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2250

    Post summary

    The text announces CVE-2026-2250, noting unauthenticated database exposure and information disclosure in METIS WIC Devices, without details on exploits or remediation.

    0001065
    4.0K followersView on X

Explore more

Back to dashboard