CVE-2026-96616
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Oct 22, 2026
Vendor
unknown
Description
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.