CVE-2026-6274

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0321
https://github.com/bugresearch/CVE-2026-6274

Configurations

No configuration.

History

23 Jul 2026, 07:10

Type	Values Removed	Values Added
Summary		(es) Autenticación indebida, falta de autenticación para función crítica, vulnerabilidad de autenticación débil en DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 permite acceder a funcionalidad no debidamente restringida por ACLs. Este problema afecta a Redline WR3200: desde 7.1.3 anterior a 7.1.8.

08 Jun 2026, 19:16

Type	Values Removed	Values Added
References		() https://github.com/bugresearch/CVE-2026-6274 -

05 Jun 2026, 09:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-05 09:16

Updated : 2026-07-23 07:10

NVD link : CVE-2026-6274

Mitre link : CVE-2026-6274

CVE.ORG link : CVE-2026-6274

JSON object : View

Products Affected

No product.

CWE

CWE-287

Improper Authentication

CWE-306

Missing Authentication for Critical Function

CWE-1390

Weak Authentication

{"id": "CVE-2026-6274", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-6274", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-05T20:21:18.983629Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "DTS Electronics Industry and Trade Ltd. Co.", "product": "Redline WR3200", "versions": [{"status": "affected", "version": "7.1.3", "lessThan": "7.1.8", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-05T09:16:26.373", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0321", "source": "iletisim@usom.gov.tr"}, {"url": "https://github.com/bugresearch/CVE-2026-6274", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-1390"}]}], "descriptions": [{"lang": "en", "value": "Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs.\n\nThis issue affects Redline WR3200: from 7.1.3 before 7.1.8."}, {"lang": "es", "value": "Autenticaci\u00f3n indebida, falta de autenticaci\u00f3n para funci\u00f3n cr\u00edtica, vulnerabilidad de autenticaci\u00f3n d\u00e9bil en DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 permite acceder a funcionalidad no debidamente restringida por ACLs.\n\nEste problema afecta a Redline WR3200: desde 7.1.3 anterior a 7.1.8."}], "lastModified": "2026-07-23T07:10:00.113", "sourceIdentifier": "iletisim@usom.gov.tr"}