B3NCLOUD ARTICLE INTELLIGENCE

ARTICLEVIEW

Zurück zu News

CVE-2026-42947 - Naxclow IoT Platform Authorization bypass through User-Controlled key

CVE ID :CVE-2026-42947 Published : June 12, 2026, 6:13 p.m. | 54 minutes ago Description :A flaw in Naxclow's platform’s onboarding workflow allows an attacker to replay a confirm-then-bind sequence to silently reassign a device to an arbitrary account. Because the affected endpoints validate...

Original-Artikel öffnen Zurück zur Übersicht