CVE-2026-102250: High severity vulnerability
Published Oct 13, 2026
·Updated
CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device.
Event History
Oct 13, 2026
CVE Published
via MITRE·02:51 PM
Data Sourced
via MITRE·02:51 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Is an authenticated administrator involved in the affected scenario?
Yes. The described condition occurs when an authorized admin user begins a firmware update procedure.
2
What is the potential consequence if the issue is exploited?
Modified firmware could be uploaded, which could result in control over the device.