CVE-2026-26048
Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encryption. An attacker can use this to cause unauthorized disruptions and create a denial-of-service condition.
| CWE | CWE-306 |
| Vendor | jinan usr iot technology limited (pusr) |
| Product | usr-w610 |
| Published | Feb 20, 2026 |
| Last Updated | Feb 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for jinan usr iot technology limited (pusr) usr-w610
Be the first to know when new high vulnerabilities affecting jinan usr iot technology limited (pusr) usr-w610 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Jinan USR IOT Technology Limited (PUSR) / USR-W610
0 ≤ 3.1.1.0
References
Credits
Abhishek Pandey and Ranit Pradhan of Payatu Security Consulting reported this to CISA.