CVE-2026-124578: Pantum BP5100DW Web omDB.shtml missing authentication
A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. The impacted element is an unknown function of the file /shtml/omDB.shtml of the component Web Interface. The manipulation leads to missing authentication. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue can be initiated remotely and requires no privileges or user interaction. Any reachable affected device web interface may be exposed to an unauthenticated attacker.
What security impact is documented?
The supplied severity vector indicates low confidentiality impact, with no integrity or availability impact documented.
Is a vendor fix or mitigation available?
The provided information does not identify a fix or workaround. It states that the vendor was contacted but did not respond.