CVE-2026-16771

In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/*.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the LAN to read sensitive configuration data, modify persistent device settings, or trigger backend diagnostic operations. The issue appears systemic across the CGI handler chain.

• CWE-306

• https://kb.cert.org/vuls/id/141367
• https://www.kb.cert.org/vuls/id/141367

Published

Jul 28, 2026

Last Modified

Jul 28, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-16764A vulnerability was identified in OWASP DefectDojo 2.59.0. T…6.3
• CVE-2026-16765A vulnerability was determined in CodeAstro Online Classroom…7.3
• CVE-2026-16766Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl a…9.8
• CVE-2026-16767A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2.…6.5
• CVE-2026-16768A flaw was found in gdk-pixbuf. When parsing a specially cra…5.3
• CVE-2026-1677Zephyr sockets created with `IPPROTO_TLS_1_3` can still nego…5.3
• CVE-2026-16773The WPBot – AI ChatBot for Live Support, Lead Generation, AI…5.3
• CVE-2026-16774The Chatbot plugin for WordPress is vulnerable to Missing Au…5.3
• CVE-2026-1678dns_unpack_name() caches the buffer tailroom once and reuses…9.8
• CVE-2026-1679The eswifi socket offload driver copies user-provided payloa…7.8
• CVE-2026-16796Improper neutralization of argument delimiters in the instal…8.4
• CVE-2026-16797The ShopLentor – All-in-One WooCommerce Growth & Store Enhan…4.3