CVE-2026-25872

JUNG Smart Panel 5.1 KNX Unauthenticated Path Traversal

CVSS 6.9 MEDIUMEPSS 0.7%CWE-22

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.9EPSS 0.7%KEV nãoPoC —Patch —

Ciclo de vida

10 fev 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the embedded web interface. The application fails to properly validate file path input, allowing remote, unauthenticated attackers to access arbitrary files on the underlying filesystem within the context of the web server. This may result in disclosure of system configuration files and other sensitive information.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Produtos afetados

ALBRECHT JUNG GMBH & CO. KG · JUNG Smart Panel 5.1 KNX

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://downloads.jung.de/public/en/pdf/productdocumentation/en_sp5.1knx_09012015.pdf https://www.jung-group.com/https://www.vulncheck.com/advisories/jung-smart-panel-knx-unauthenticated-path-traversal https://www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5969.php