CVE-2026-25819: High severity HMS Networks Ewon Flexy vulnerability
HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attackers to cause a Denial of Service by using a specially crafted HTTP request that leads to a reboot of the device, provided they have access to the device's GUI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25819?
The severity of CVE-2026-25819 is rated high with a CVSS score of 7.5.
What devices are affected by CVE-2026-25819?
CVE-2026-25819 affects HMS Networks Ewon Flexy with firmware before 15.0s4 and Cosy+ with firmware versions 22.xx before 22.1s6 and 23.xx before 23.0s3.
How do I fix CVE-2026-25819?
To fix CVE-2026-25819, upgrade the affected devices to the latest firmware versions as specified in the vendor's advisory.
What type of attack does CVE-2026-25819 enable?
CVE-2026-25819 allows unauthenticated attackers to cause a Denial of Service by sending a specially crafted HTTP request.
When was CVE-2026-25819 published?
CVE-2026-25819 was published on March 12, 2026.