Back to CVE records
Critical 10.0Published Sep 27, 2026

CVE-2026-100886Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

Updated under an hour ago ()

Does this affect you?

It affects Seetong T8108 and 3 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.77%, higher than 54% of scored CVEs.

A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS
10.0 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:W/RC:R
Weakness (CWE)
CWE-287
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
0.77% (percentile 54)
Assigned by
VulDB
NVD analysis
Deferred
Record last updated
Sep 28, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Seetong T8108
seetong:t8108
4.6.1.4-build202604241011
CNA record
Seetong T8108P
seetong:t8108p
4.6.1.4-build202604241011
CNA record
Seetong T8116
seetong:t8116
4.6.1.4-build202604241011
CNA record
Seetong T8232
seetong:t8232
4.6.1.4-build202604241011
CNA record

References

  • vdb-entry
  • signature, permissions-required
  • third-party-advisory
  • third-party-advisory
  • exploit

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.