Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-100886: Seetong T8108 series lets attackers access without login
CVE-2026-100886 · published 21 days ago
Summary
The Debug Service on Seetong T8108, T8108P, T8116 and T8232 devices does not correctly verify who is connecting, so an outsider could reach the device over the network. Because the flaw can be exploited from anywhere and tools to do so are already available, the risk of unauthorized control is real. Apply any vendor‑provided patches or updates immediately, and restrict network access to these devices until they are secured.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| seetong | t8108 | 4.6.1.4-build202604241011 |
| seetong | t8108p | 4.6.1.4-build202604241011 |
| seetong | t8116 | 4.6.1.4-build202604241011 |
| seetong | t8232 | 4.6.1.4-build202604241011 |
Original advisory text
Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication
A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-287Improper Authentication
Timeline
Published27 Sep 2026
Updated19 Oct 2026
First seen28 Sep 2026
Track software like this
Free during beta