CVE-2026-36829

An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and bypass of authentication.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714
https://www.panabit.com/
https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714

Configurations

No configuration.

History

No history.

Information

Published : 2026-05-19 17:16

Updated : 2026-07-24 12:10

NVD link : CVE-2026-36829

Mitre link : CVE-2026-36829

CVE.ORG link : CVE-2026-36829

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-287

Improper Authentication

{"id": "CVE-2026-36829", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-36829", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-19T17:37:00.706519Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-05-19T17:16:22.210", "references": [{"url": "https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714", "source": "cve@mitre.org"}, {"url": "https://www.panabit.com/", "source": "cve@mitre.org"}, {"url": "https://secreu.notion.site/CVE-2026-36829-3652c0ab461580e19704e87b18865714", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7. The server validates session cookies using a filesystem existence check based on a user-controlled cookie value without proper sanitization, allowing directory traversal and bypass of authentication."}, {"lang": "es", "value": "Existe una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en el servidor HTTP embebido de Panabit PAP-XM320 hasta la versi\u00f3n 7.7 inclusive. El servidor valida las cookies de sesi\u00f3n utilizando una comprobaci\u00f3n de existencia en el sistema de archivos basada en un valor de cookie controlado por el usuario sin una sanitizaci\u00f3n adecuada, lo que permite el salto de directorio y la omisi\u00f3n de autenticaci\u00f3n."}], "lastModified": "2026-07-24T12:10:00.210", "sourceIdentifier": "cve@mitre.org"}