CVE-2026-40699
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access undisclosed sensitive information.
Risk Assessment
A low-privileged attacker may gain access to confidential data, potentially compromising the organization's security.
Recommendation
It is recommended to monitor access to the configuration utility and update the software to versions that have not reached End of Technical Support.
Original NVD description (English source)
A vulnerability exists in the undisclosed pages in the Configuration utility that may allow a low-privileged authenticated attacker to access to undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.