What is CVE-2026-2250?

CVE-2026-2250 is a high-severity vulnerability in Metis Cyberspace Technology Sa Wic, classified under Insertion of Sensitive Information Into Debugging Code. CVSS score: 7.5/10. Published 2026-02-11.

How severe is CVE-2026-2250?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Metis Cyberspace Technology Sa Wic

CVE-2026-2250

The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is conf…

EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Metis Cyberspace Technology Sa Wic — versions oscore 2.1.234-r18, oscore 2.1.235-r19

Weakness classification (CWE)

References

56a186b1-7f5e-4314-ba38-38d5499fccfd (x_vendor-website)
56a186b1-7f5e-4314-ba38-38d5499fccfd (technical-description)

Frequently asked questions

What is CVE-2026-2250?: CVE-2026-2250 is a high-severity vulnerability in Metis Cyberspace Technology Sa Wic, classified under Insertion of Sensitive Information Into Debugging Code. CVSS score: 7.5/10. Published 2026-02-11.
How severe is CVE-2026-2250?: High severity. CVSS v3 base score is 7.5 out of 10.