CVE-2026-19918
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was found in SpaceX Starlink Router Gen 3 version 2025.11.14.mr64708.3 in the get_status function of the gRPC Management Interface component. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit is public, and the vendor did not respond.
Risk Assessment
Risk of unauthorized access to router management within the local network, potentially allowing configuration changes or traffic interception. The organization may face network security breaches.
Recommendation
It is recommended to monitor vendor updates and consider restricting access to the management interface to trusted devices only.
Original NVD description (English source)
A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.