Auth bypass in Seetong T8108
CVE-2026-100886
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability class: Broken Authentication
Published .
CVSS v3 metric
CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Seetong T8108 — versions 4.6.1.4-build202604241011
- Seetong T8108p — versions 4.6.1.4-build202604241011
- Seetong T8116 — versions 4.6.1.4-build202604241011
- Seetong T8232 — versions 4.6.1.4-build202604241011
Weakness classification (CWE)
References
- github.com/heapframe/seetong-ts81xxd3x-rce (exploit)
- vuldb.com/cve/CVE-2026-100886 (third-party-advisory)
- vuldb.com/submit/916434 (third-party-advisory)
- vuldb.com/vuln/410835 (vdb-entry)
- vuldb.com/vuln/410835/cti (signature, permissions-required)
Frequently asked questions
- What is CVE-2026-100886?
- CVE-2026-100886 is a critical-severity vulnerability in Seetong T8108, classified under Improper Authentication. CVSS score: 10.0/10. Published 2026-09-27.
- How severe is CVE-2026-100886?
- Critical severity. CVSS v3 base score is 10.0 out of 10.