CVE-2026-26368: high-severity vulnerability in JUNG eNet SMART HOME server
JUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeover via resetUserPassword
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in JUNG eNet SMART HOME server allows any regular user to reset passwords of admin accounts without authorization, letting them take over the system. This happens because the password reset function doesn't properly check if the user has permission to change other accounts.
The resetUserPassword JSON-RPC method at /jsonrpc/management lacks authorization checks, permitting authenticated low-privileged users (UG_USER) to reset passwords for arbitrary accounts including UG_ADMIN and UG_SUPER_ADMIN groups without current password verification. An attacker sends a crafted JSON-RPC request to overwrite admin credentials, achieving account takeover and privilege escalation to full administrative access.
In the same product, most dangerous first.