CVE-2026-94493criticalCWE-287CWE-306

CVE-2026-94493: critical vulnerability in Gigatech PDV5701

Gigatech PDV5701 WebSocket Service index.html missing authentication

Published · Updated

Follow this CVE+ Monitor PDV5701

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 10epss 0.7%
A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown processing of the file /index.html of the component WebSocket Service. The manipulation results in missing authentication. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Affected products
Gigatech · PDV5701
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.