CVE-2026-20761

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 30, 2026

Last Seen

April 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in EnOcean SmartServer Expose Building Management Systems to Attacks72.0

Two critical vulnerabilities, CVE-2026-20761 and CVE-2026-22885, were discovered in EnOcean's SmartServer IoT platform, affecting versions 4.60.009 and earlier. CVE-2026-20761 allows remote attackers to execute arbitrary commands on devices via crafted LON IP-852 messages, with a CVSS score of 8.1....

Multiple Vulnerabilities Reported by Team82: CVE-2026-20761 and CVE-2026-2288539.9

Team82 has reported two vulnerabilities, CVE-2026-20761 and CVE-2026-22885, both published on 2026-02-20. The vulnerabilities affect various products and services, although specific systems were not detailed in the articles. Team82 emphasizes its commitment to coordinated disclosure, inviting vendor...