Is CVE-2026-4582 actively exploited?

No active exploitation of CVE-2026-4582 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-4582 be exploited remotely?

Partially. CVE-2026-4582 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-4582?

CVE-2026-4582 has a CVSS score of 5.0 (MEDIUM).

HOME VULNERABILITIESCVE-2026-4582

MEDIUM

CVE-2026-4582

CWE-287Published: March 23, 2026· Updated: Mar 23, 2026

5.0

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:5.9th

Official Description

A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. Attacks of this nature are highly complex. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

NVD Source

Technical Analysis

CVE-2026-4582 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.