CVE-2026-108578
Received Received - Intake

Information Disclosure in Neterbit NW-431F Embedded Web Server

Publication date: 2026-10-11

Last updated on: 2026-10-11

Assigner: VulDB

Description
A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to information disclosure. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-11
Last Modified
2026-10-11
Generated
2026-10-11
AI Q&A
2026-10-11
EPSS Evaluated
N/A
NVD
CVE-2026-108578
EUVD
EUVD-2026-96927

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Neterbit NW-431F 20250715

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Neterbit NW-431F 20250715, specifically in the Embedded Web Server component. It involves an unknown function in the file /sms.json that allows remote attackers to disclose sensitive information. The vendor did not respond to the disclosure attempt.

Detection Guidance

This vulnerability involves an information disclosure issue in the Neterbit NW-431F device's Embedded Web Server, specifically in the /sms.json file. To detect it, check if the device's web interface is accessible and if the /sms.json endpoint is exposed. Use network scanning tools like curl or wget to query the endpoint. Example command: curl -v http://<device-ip>/sms.json. If the file is accessible without authentication, the vulnerability may be present.

Impact Analysis

An attacker could remotely access the /sms.json file to steal confidential information. This may lead to unauthorized data exposure, privacy breaches, or further exploitation depending on the disclosed data.

Compliance Impact

This vulnerability could result in non-compliance with GDPR or HIPAA if it leads to unauthorized access or disclosure of personal or health data. Organizations may face legal penalties, fines, or reputational damage.

Mitigation Strategies

Isolate the affected Neterbit NW-431F device from the network to prevent remote exploitation. Disable access to the Embedded Web Server or restrict it to trusted networks. Monitor for unusual activity in /sms.json and apply vendor patches if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108578. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart