CVE-2026-4832

MediumCVSS 6.9

Published: 14/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 27/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

A CWE-798 Use of Hard-coded Credentials vulnerability exists that could allow an unauthenticated attacker to gain unauthorized access to sensitive device information by interrogating the SNMP port.

Risk Assessment

An unauthenticated attacker could access sensitive device information, potentially facilitating further attacks on the infrastructure.

Recommendation

Change default/hard-coded SNMP credentials, restrict access to the SNMP port, and apply the vendor update if available.

Other vulnerabilities in SNMP

CVE-2026-33367High
SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.

Original NVD description (English source)

CWE-798 Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to sensitive device information when an unauthenticated attacker is able to interrogate the SNMP port.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS