What is CVE-2026-26049?

CVE-2026-26049 is a medium-severity vulnerability in Jinan Usr Iot Technology Limited (Pusr) Usr-W610, classified under Insufficiently Protected Credentials. CVSS score: 5.7/10. Published 2026-02-20.

How severe is CVE-2026-26049?

Medium severity. CVSS v3 base score is 5.7 out of 10.

Vulnerability in Jinan Usr Iot Technology Limited (Pusr) Usr-W610

CVE-2026-26049

The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentially exposing administrator credentials to unauthorized observation via shoulder surfing, screenshots, or browser form caching.

EPSS: 0.003 (20.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.

Affected products

Jinan Usr Iot Technology Limited (Pusr) Usr-w610 — versions 0

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

Frequently asked questions

What is CVE-2026-26049?: CVE-2026-26049 is a medium-severity vulnerability in Jinan Usr Iot Technology Limited (Pusr) Usr-W610, classified under Insufficiently Protected Credentials. CVSS score: 5.7/10. Published 2026-02-20.
How severe is CVE-2026-26049?: Medium severity. CVSS v3 base score is 5.7 out of 10.