CVE-2026-33367

CVSS 9.3 (critical) · published 2026-10-09

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.

Weakness: CWE-306

Source: NVD CVE-2026-33367

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
• https://www.hms-networks.com/
• https://www.hms-networks.com/cybersecurity

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.