CVE-2026-97858

5.3 MEDIUMpublic exploit available

Published 2026-10-16 · Updated 2026-10-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-915

Public exploit & PoC references

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json

All references

https://eseecloud.app/
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-102780
MEDIUMCVE-2026-103036PoC
UNSCOREDCVE-2026-103235PoC
MEDIUMCVE-2026-103918PoC
UNSCOREDCVE-2026-104908PoC
MEDIUMCVE-2026-105180PoC
UNSCOREDCVE-2026-105863PoC
HIGHCVE-2026-106100PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.