CVE-2026-104075

{
  "etk_id": "ETK-2026-1012",
  "cve_id": "CVE-2026-104075",
  "display_id": "CVE-2026-104075",
  "ghsa_id": "GHSA-6m79-2fc6-x428",
  "euvd_id": "EUVD-2026-95250",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authentication bypass in TVU Receiver/Transceiver web management",
  "summary": "TVU Receiver/Transceiver devices using firmware earlier than 7.9 are affected by an authentication flaw in the web management service. An unauthenticated remote actor who can reach that interface may obtain administrative access.",
  "mitigation": "Upgrade TVU Receiver/Transceiver firmware to version 7.9 or later. Restrict access to the web management interface to trusted administrative networks until the update is applied.",
  "vendor": "TVU Networks",
  "product": "TVU Receiver / Transceiver",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 7.9"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "7.9"
      ],
      "package_name": "TVU Receiver / Transceiver",
      "purl": null
    }
  ],
  "cwes": [
    288
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "epss_score": 0.0056,
  "epss_percentile": 0.4602,
  "epss_asof": "2026-10-21",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 37.35846335,
  "t0_at": "2026-10-08T19:24:25.801000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-08T19:24:25.801000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-08T19:24:25.801000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104075"
    }
  }
}