Critical severity · published Sep 7, 2026
CVE-2026-16876
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V
9.3
CVSS
0.6%
EPSS
No
On KEV
Description
An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UI
UNIVERGE IX-R/IX-V · NEC Corporation
All versions from Ver1.1 through Ver1.3, All versions from Ver1.4.21 through Ver1.4.28 and Ver1.5.23 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-16876
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-16876
jpn.nec.com
https://jpn.nec.com/security-info/secinfo/nv26-005_en.html
More from UNIVERGE IX-R/IX-V
7.2
CVE-2024-11013
Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V…
5.1
CVE-2025-8153
Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to…