August 16, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-42932NVD

Vulnerability Summary

Naxclow device identifiers use fixed manufacturing prefixes combined with sequential counters, producing a fully predictable and enumerable identifier space. Because the platform also exposes an endpoint that reveals the current identifier high-water mark, the active fleet can be enumerated.
Severity Level
MEDIUM(5.3)
Published Date
Jun 12, 2026
Last Modified
Jun 12, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.23%Probability
Root Weakness (CWE)
N/A
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityLow
IntegrityNone
AvailabilityNone