CVE-2026-40856
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 16, 2026
Vendor
unknown
Description
WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi passphrase, and technical device information.This issue has been fixed in firmware version 1.1.0.651412