Metis Cyberspace Technology Sa

3 CVEs in 2 Metis Cyberspace Technology Sa products, including Metis Wic, Metis Dfs. Newest: CVE-2026-2250 (2026-02-11).

Metis Cyberspace Technology Sa products with known CVEs

ProductCVEs
Metis Wic2
Metis Dfs1
Metis Cyberspace Technology Sa CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2250High7.52026-02-11The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite datab…
CVE-2026-2249Critical9.82026-02-11METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpo…
CVE-2026-2248Critical9.82026-02-11METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpo…