What is CVE-2026-25715?

CVE-2026-25715 is a critical-severity vulnerability in Jinan Usr Iot Technology Limited (Pusr) Usr-w610, classified under Weak Password Requirements. CVSS score: 9.8/10. Published 2026-02-20.

How severe is CVE-2026-25715?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Jinan Usr Iot Technology Limited (Pusr) Usr-w610

CVE-2026-25715

The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty credentials over the web management interface and Telnet ser…

EPSS: 0.006 (42.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jinan Usr Iot Technology Limited (Pusr) Usr-w610 — versions 0

Weakness classification (CWE)

CWE-521 — Weak Password Requirements

References

Frequently asked questions

What is CVE-2026-25715?: CVE-2026-25715 is a critical-severity vulnerability in Jinan Usr Iot Technology Limited (Pusr) Usr-w610, classified under Weak Password Requirements. CVSS score: 9.8/10. Published 2026-02-20.
How severe is CVE-2026-25715?: Critical severity. CVSS v3 base score is 9.8 out of 10.