CVE-2026-33367

HighCVSS 8.1

Published: 09/10/2026(UTC)Updated: 11/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

Summary

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.

Risk Assessment

An unauthenticated attacker can take control of the device, alter configuration, and install malicious software. This is a critical network security threat.

Recommendation

Disable SNMP or secure it with strong authentication and ACLs. Update device firmware and monitor for unauthorized configuration changes.

Other vulnerabilities in SNMP

CVE-2026-4832Medium
A CWE-798 Use of Hard-coded Credentials vulnerability exists that could allow an unauthenticated attacker to gain unauthorized access to sensitive device information by interrogating the SNMP port.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS