CVE-2026-97858

LOWCVSS 6.9 · MEDIUM

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://eseecloud.app/
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02

Weakness type (CWE)

CWE-915

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

CVE@CVEnew1d
CVE-2026-97858 An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is curre… https://www.cve.org/CVERecord?id=CVE-2026-97858
00000567
58.2K followersView on X

Explore more

Back to dashboard