8.8 HighCWE-306
CVE-2026-32296
Sipeed NanoKVM unauthenticated Wi-Fi configuration endpoint
SipeedNanoKVM
Status
- Not in CISA KEV
- Fixed in version 2.3.1
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 46% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change the saved configured Wi-Fi network to one of the attacker's choosing, or craft a request to exhaust the system memory and terminate the KVM process.
Coverage 1 article · 1 outlet
- Researchers disclose vulnerabilities in IP KVMs from 4 manufacturersArs Technica · first in our coverage