Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-1840

Missing authentication for critical function in Hubbell Aclara Metrum Cellular Web Interface

Description

The Aclara Metrum Cellular Web Interface is vulnerable to unauthorized access due to the absence of authentication controls on critical system functions. This weakness exposes essential configuration settings, allowing attackers to alter operational parameters and trigger system restarts without restriction. Such unauthorized changes can disrupt normal functionality and, if performed repeatedly, may lead to a loss of communications to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hubbell Aclara Metrum Cellular Web Interface

Default version status: unaffected

  • 0 to < 2.1.0.105affected

References