CVE 9.3 CRITICAL

JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials_CVE-2026-26366

9.3 / 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory password change. Unauthenticated attackers can use these default credentials to gain administrative access to sensitive smart home configuration and control functions.

AI Analysis

Use of default credentials in eNet SMART HOME server 2.2.1 and 2.3.1 allows unauthenticated attackers to gain administrative access

Basic Information

ID CVE-2026-26366
Source VulnCheck
Published Feb 15, 2026 at 15:29

Affected Product

Vendor JUNG
Product eNet SMART HOME server
Version 2.3.1 (46841)
Affected Versions JUNG eNet SMART HOME server 2.3.1 (46841)
JUNG eNet SMART HOME server 2.2.1 (46056)

CWE Classification

AI Assessment

AI Score 9.3 / 10
AI Severity Critical
Vendor JUNG
Product eNet SMART HOME server
Version 2.2.1, 2.3.1

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.