P4Verified

CVE-2026-110109: JetLinks Community 0 through 2.10.0

CVE-2026-110109. CVSS 3.1 base score 6.5 (MEDIUM, Vendor/CNA).

Affected technology

JetLinks Community · 0 through 2.10.0
jetlinks

Description’s affected range: through 2.10.0

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Attackers can save arbitrary codec providers and configurations, controlling how transparent messages are decoded and encoded for every device of that product. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and availability impact as none; integrity impact as high.

Published 13-Oct-2026 20:19 UTC

CWE: CWE-862
CCR priority: 26.0 /100 (P4)
CVSS 3.1: 6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · Vendor/CNA
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-13 20:20:59.886514+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-13 20:16:59.278043+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-110109.html