Is CVE-2026-8185 actively exploited?

No active exploitation of CVE-2026-8185 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-8185 be exploited remotely?

Partially. CVE-2026-8185 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-8185?

CVE-2026-8185 has a CVSS score of 6.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-8185

MEDIUM

CVE-2026-8185

CWE-287Published: May 9, 2026· Updated: May 11, 2026

6.3

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:1.5th

Official Description

A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. Such manipulation leads to missing authentication. The attack requires being on the local network. You should upgrade the affected component. The vendor replied: "We have successfully confirmed and reproduced the issue. We take this matter very seriously and have incorporated the fix into our development schedule. The issue is scheduled to be resolved in the release version coming in late April."

NVD Source

Technical Analysis

CVE-2026-8185 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

From a weakness classification perspective (CWE-287): Authentication bypass vulnerabilities allow attackers to access protected resources without valid credentials.