9.3
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory password change. Unauthenticated attackers can use these default credentials to gain administrative access to sensitive smart home configuration and control functions.
AI Analysis
Use of default credentials in eNet SMART HOME server 2.2.1 and 2.3.1 allows unauthenticated attackers to gain administrative access
Basic Information
ID
CVE-2026-26366
Source
VulnCheck
Published
Feb 15, 2026 at 15:29
Affected Product
Vendor
JUNG
Product
eNet SMART HOME server
Version
2.3.1 (46841)
Affected Versions
JUNG eNet SMART HOME server 2.3.1 (46841)
JUNG eNet SMART HOME server 2.2.1 (46056)
JUNG eNet SMART HOME server 2.2.1 (46056)
CWE Classification
AI Assessment
AI Score
9.3 / 10
AI Severity
Critical
Vendor
JUNG
Product
eNet SMART HOME server
Version
2.2.1, 2.3.1