CVE-2026-408567.1HighCWE-306
Config disclosure in T-Mobile 5G Box IDU routers
WNC · T-Mobile 5G Box IDU
Not in CISA KEVVendor fix available
0.4%probability of exploitation in the next 30 days
31st percentile
050100
Higher than 31% of scored CVEs
7.1HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi passphrase, and technical device information.This issue has been fixed in firmware version 1.1.0.651412
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 17 Sep.
- Critical WNC flaws expose T-Mobile 5G Box routers to attacksSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.