CVE-2026-20761 - Vulnerability Details

Frequency

occurrences

First Seen

April 30, 2026

Last Seen

April 30, 2026

CVE-2026-20761 is a vulnerability tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed April 30, 2026; most recent activity April 30, 2026.

Related Threat Clusters

Critical Vulnerabilities in EnOcean SmartServer Expose Building Management Systems to Attacks
Two critical vulnerabilities, CVE-2026-20761 and CVE-2026-22885, were discovered in EnOcean's SmartServer IoT platform, affecting versions 4.60.009 and earlier. CVE-2026-20761 allows remote attackers to execute…

3 articles · Updated April 30, 2026
Multiple Vulnerabilities Reported by Team82: CVE-2026-20761 and CVE-2026-22885
Team82 has reported two vulnerabilities, CVE-2026-20761 and CVE-2026-22885, both published on 2026-02-20. The vulnerabilities affect various products and services, although specific systems were not detailed in the…

2 articles · Updated April 30, 2026

Recent Intelligence Reports

CVE-2026-20761 — claroty.com · April 30, 2026
Exploiting Enocean Smartserver To Attack Connected Building Management Systems — claroty.com · April 30, 2026
Research finds EnOcean SmartServer vulnerabilities could let attackers take over BMS and ... — Industrialcyber.Co · April 30, 2026

Related Entities

Zero-day Exploit Echelon EnOcean Team82 CVE-2026-22885 CWE-120 - Classic Buffer Overflow CWE-200 - Exposure of Sensitive Information CWE-20 - Improper Input Validation CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication CWE-78 - OS Command Injection Manufacturing

CVE-2026-20761 - Vulnerability Details

Entity Not Found

Related Threat Clusters

Recent Intelligence Reports

Related Entities

CVSS v3.1 Breakdown