CVE-2026-36829

An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and bypass of authentication.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714
https://www.panabit.com/
https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714

Configurations

No configuration.

History

24 Jul 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) Existe una vulnerabilidad de omisión de autenticación en el servidor HTTP embebido de Panabit PAP-XM320 hasta la versión 7.7 inclusive. El servidor valida las cookies de sesión utilizando una comprobación de existencia en el sistema de archivos basada en un valor de cookie controlado por el usuario sin una sanitización adecuada, lo que permite el salto de directorio y la omisión de autenticación.

19 May 2026, 18:16

Type	Values Removed	Values Added
References	~~() https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714 -~~	() https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714 -
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8
CWE		CWE-22 CWE-287

19 May 2026, 17:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-19 17:16

Updated : 2026-07-24 12:10

NVD link : CVE-2026-36829

Mitre link : CVE-2026-36829

CVE.ORG link : CVE-2026-36829

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-287

Improper Authentication

{"id": "CVE-2026-36829", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-36829", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-19T17:37:00.706519Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-05-19T17:16:22.210", "references": [{"url": "https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714", "source": "cve@mitre.org"}, {"url": "https://www.panabit.com/", "source": "cve@mitre.org"}, {"url": "https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and bypass of authentication."}, {"lang": "es", "value": "Existe una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en el servidor HTTP embebido de Panabit PAP-XM320 hasta la versi\u00f3n 7.7 inclusive. El servidor valida las cookies de sesi\u00f3n utilizando una comprobaci\u00f3n de existencia en el sistema de archivos basada en un valor de cookie controlado por el usuario sin una sanitizaci\u00f3n adecuada, lo que permite el salto de directorio y la omisi\u00f3n de autenticaci\u00f3n."}], "lastModified": "2026-07-24T12:10:00.210", "sourceIdentifier": "cve@mitre.org"}