CVE-2026-19918

MEDIUM 6.3

SpaceX Starlink Router Gen 3 gRPC Management get_status access control

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in SpaceX Starlink Router Gen 3 2025.11.14.mr64708.3. This affects the function get_status of the component gRPC Management Interface. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-284 CWE-266
Vendor	spacex
Product	starlink router gen 3
Published	Aug 15, 2026

Stay Ahead of the Next One

Get instant alerts for spacex starlink router gen 3

Be the first to know when new medium vulnerabilities affecting spacex starlink router gen 3 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SpaceX / Starlink Router Gen 3

2025.11.14.mr64708.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/390168 vuldb.com: https://vuldb.com/vuln/390168/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19918 vuldb.com: https://vuldb.com/submit/870897 ararasat.com: https://www.ararasat.com/blog/starlink-lan-grpc-control/

Credits

🔍 0dallen (VulDB User) VulDB CNA Team