HOMEVULNERABILITIESCVE-2026-2617
MEDIUMPOC

CVE-2026-2617

CWE-1188Published: February 17, 2026· Updated: Feb 19, 2026

6.3
CVSS v3.1
EPSS:0.02%probability of exploitation in 30 daysPercentile:5.1th

Official Description

A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Service/SSH Service. The manipulation results in insecure default initialization of resource. The attack can only be performed from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Technical Analysis

CVE-2026-2617 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A proof-of-concept (PoC) exploit exists for CVE-2026-2617. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorAdjacent
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityLow
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected Vendors & Products

beetel2 products
777vr1 firmware777vr1
Source: NVD CPE · 2 total CPE entries

Exploit & PoC Resources

POC AVAILABLEProof-of-concept code exists
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0
ADVISORYhttps://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0#proofsteps-to-reproduce
ADVISORYhttps://vuldb.com/?id.346267
ADVISORYhttps://vuldb.com/?submit.751436
ADVISORYhttps://vuldb.com/?submit.751568

All References (6)

→
https://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0Exploit · Third Party Advisory
→
https://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0#proofsteps-to-reproduceExploit · Third Party Advisory
→
https://vuldb.com/?ctiid.346267VDB Entry · Permissions Required
→
https://vuldb.com/?id.346267Third Party Advisory · VDB Entry
→
https://vuldb.com/?submit.751436Third Party Advisory · VDB Entry · Exploit
→
https://vuldb.com/?submit.751568Third Party Advisory · VDB Entry · Exploit

Quick Facts

CVE IDCVE-2026-2617
CVSS Score6.3 / 10
SeverityMEDIUM
WeaknessCWE-1188
CISA KEVNo
ExploitPOC
EPSS (30d)0.02%
Affected1 vendor
PublishedFeb 17, 2026

Related CVEs (CWE-1188)

CVE-2026-31957
10.0
CVE-2026-28775
9.8
CVE-2025-70998
9.8
CVE-2026-32046
9.8
CVE-2026-44109
9.8
CVE-2026-39920
9.8

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-2617 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-2617·NVD