CVE-2026-40856

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi passphrase, and technical device information.This issue has been fixed in firmware version 1.1.0.651412

• CWE-306

• https://cert.pl/posts/2026/09/CVE-2026-40854

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4085The Easy Social Photos Gallery plugin for WordPress is vulne…6.4
• CVE-2026-40850An unauthenticated remote attacker can exploit an unauthenti…8.7
• CVE-2026-40851A local attacker can perform a confusion attack on the cfgpa…8.4
• CVE-2026-40852A highly authenticated attacker can alter the config generat…7.2
• CVE-2026-40854WNC T-Mobile 5G Box IDU router contains an authentication by…8.7
• CVE-2026-40855WNC T-Mobile 5G Box IDU router is vulnerable to a command in…9.3
• CVE-2026-40857WNC T-Mobile 5G Box IDU router contains a cross-site request…8.4
• CVE-2026-40858The camel-infinispan component's ProtoStream-based remote ag…8.8
• CVE-2026-40859Deserialization of Untrusted Data vulnerability in Apache Ca…8.1
• CVE-2026-4086The WP Random Button plugin for WordPress is vulnerable to S…6.4
• CVE-2026-40860JmsBinding.extractBodyFromJms() in camel-jms, and the equiva…9.8
• CVE-2026-40861A Dag author could either (a) create a symlink under their t…6.5