CVE-2026-116371
Received Received - Intake

Authentication Bypass in Akuvox Akubela HyPanel

Publication date: 2026-10-26

Last updated on: 2026-10-26

Assigner: VulDB

Description
A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. The impacted element is an unknown function of the file /login. Executing a manipulation of the argument engrmode with the input admin can lead to improper authentication. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-26
Last Modified
2026-10-26
Generated
2026-10-26
AI Q&A
2026-10-26
EPSS Evaluated
N/A
NVD
CVE-2026-116371
EUVD
EUVD-2026-109982

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Akuvox Akubela HyPanel PS51 51.130.40.26

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper authentication weakness in Akuvox Akubela HyPanel PS51 version 51.130.40.26. It involves manipulating the 'engrmode' argument in the /login file with the input 'admin', allowing unauthorized access. The attack can be executed remotely.

Impact Analysis

This flaw may allow attackers to bypass authentication and gain unauthorized access to the system. This could lead to data breaches, unauthorized configuration changes, or further network compromise depending on the system's role.

Mitigation Strategies

Immediately restrict access to the /login endpoint on Akuvox Akubela HyPanel PS51 devices. Disable the engrmode parameter if possible or apply input validation to prevent manipulation. Monitor network traffic for unauthorized login attempts targeting this parameter.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116371. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart