VULNERABILITY INTELLIGENCE
CVE-2026-14837
CVSS score7.8 HIGH
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-07-30
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Multiple Lenze products are affected by an improper signature verification vulnerability in the SSH enablement mechanism. A low-privileged local attacker can bypass verification of the SSH enable file signature and enable SSH access on the device. Successful exploitation may result in unauthorized administrative access and complete system compromise.
Weakness classification
- info@cert.vde.com: CWE-347