Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. Because the affected endpoints validate request signatures but do not confirm legitimate ownership, an attacker with any account can take over a device without user interaction while the device remains online and unaware.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
There is a new vulnerability with elevated criticality in Naxclow Smart Doorbell X3 and other products (CVE-2026-42947) https://vuldb.com/vuln/370706
Post summary
A new high‑criticality vulnerability (CVE‑2026‑42947) has been disclosed for the Naxclow Smart Doorbell X3 and related products, but no PoC, exploit code, mitigation, or technical details are provided in the text.