{"id":"CVE-2026-16876","title":"An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V","summary":"An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.","severity":"critical","cvss":9.3,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","cwe":["CWE-306"],"vendor":"NEC Corporation","product":"UNIVERGE IX-R/IX-V","affected":["univerge_ix-r_ix-v All versions from Ver1.1 through Ver1.3, All versions from Ver1.4.21 through Ver1.4.28 and Ver1.5.23"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T16:04:24.933","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-16876","references":[{"url":"https://jpn.nec.com/security-info/secinfo/nv26-005_en.html","label":"psirt-info@cyber.jp.nec.com"}],"tags":["nvd","cve.org"],"epss":0.00331,"epssPercentile":0.26534,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-08T15:32:24.111712Z"},"cvssSource":"cna","ingestedAt":"2026-09-07T12:10:15.005Z","slug":"CVE-2026-16876","body":"## Overview\n\nAn authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":51.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":4971,"id":"CVE-2026-16876","ts":1788887222067,"field":"cvss","old":null,"new":"9.3"},{"seq":4970,"id":"CVE-2026-16876","ts":1788887222067,"field":"severity","old":"none","new":"critical"},{"seq":3854,"id":"CVE-2026-16876","ts":1788886354690,"field":"cvss","old":"9.3","new":null},{"seq":3853,"id":"CVE-2026-16876","ts":1788886354690,"field":"severity","old":"critical","new":"none"},{"seq":3298,"id":"CVE-2026-16876","ts":1788885294213,"field":"cvss","old":null,"new":"9.3"},{"seq":3297,"id":"CVE-2026-16876","ts":1788885294213,"field":"severity","old":"none","new":"critical"}]}