CVE-2020-11926

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information includes the SSID and WPA2 key for the Wi-Fi network the device is connected to.

• CWE-79

• https://seclists.org/fulldisclosure/2024/Jul/14
• http://seclists.org/fulldisclosure/2024/Jul/14

Published

Nov 7, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11920An issue was discovered in Svakom Siime Eye 14.1.00000001.3.…9.8
• CVE-2020-11921An issue was discovered in Lush 2 through 2020-02-25. Due to…8.8
• CVE-2020-11922An issue was discovered in WiZ Colors A60 1.14.0. The device…4.3
• CVE-2020-11923An issue was discovered in WiZ Colors A60 1.14.0. API creden…5.5
• CVE-2020-11924An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi cred…5.5
• CVE-2020-11925An issue was discovered in Luvion Grand Elite 3 Connect thro…8.8
• CVE-2020-11928In the media-library-assistant plugin before 2.82 for WordPr…9.8
• CVE-2020-1193<p>A remote code execution vulnerability exists in Microsoft…7.8
• CVE-2020-11930The GTranslate plugin before 2.8.52 for WordPress has Reflec…6.1
• CVE-2020-11931An Ubuntu-specific modification to Pulseaudio to provide sec…3.3
• CVE-2020-11932It was discovered that the Subiquity installer for Ubuntu Se…2.3
• CVE-2020-11933cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu …6.8