Get real-time updates on Telegram
P5
CVE-2026-4648: NFC Wristbands FM11RF08S variant
CVE-2026-4648. EPSS 0.00162 (percentile 0.05099), scored 22-Oct-2026.
Affected technology
NFC Wristbands · FM11RF08S variant
CasfID Servicios Tecnológicos
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 4.0): Physical access · No privileges required · No user interaction required
What an attacker can do
An attacker can retrieve access keys using techniques known as Backdoored Nested Attack, read the wristband’s entire contents, and clone its credentials onto a compatible rewritable card. Vendor/CNA’s CVSS 4.0 assessment (base score 6.8/10) rates confidentiality and integrity impact as high; availability impact as none.
- CWE
- CWE-326
- CCR priority
- 0.0 /100 (P5)
- EPSS
- 0.00162 · percentile 0.05092 · 2026-10-24
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-24 15:09:16.138216+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-24 15:07:27.951960+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-4648.html