CVE-2026-8185— UGREEN CM933 Administrative missing authentication
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8185
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
UGREEN CM933 Administrative missing authentication
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. Such manipulation leads to missing authentication. The attack requires being on the local network. You should upgrade the affected component. The vendor replied: "We have successfully confirmed and reproduced the issue. We take this matter very seriously and have incorporated the fix into our development schedule. The issue is scheduled to be resolved in the release version coming in late April."
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
关键功能的认证机制缺失
Source: NVD (National Vulnerability Database)
Vulnerability Title
UGREEN CM933 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
UGREEN CM933是中国绿联（UGREEN）公司的一款提供多接口扩展与数据传输功能的USB集线器设备。 UGREEN CM933 1.1.59.4319版本存在授权问题漏洞，该漏洞源于管理接口组件中未知功能导致缺少身份验证，攻击者需位于本地网络。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-8185
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8185
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-306
- CVE-2026-45397
Open WebUI: Unauthenticated RAG Configuration Disclosure - CVE-2026-45248
Hedera Guardian Authentication Bypass Information Disclosure - CVE-2026-44592
Gradient: Unauthenticated worker on /proto → arbitrary NAR w - CVE-2026-42283
DevSpace UI Server WebSocket CheckOrigin does not validate s - CVE-2025-62619
KVM漏洞：密钥下载接口缺少认证致敏感信息泄露
V. Comments for CVE-2026-8185
No comments yet