Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-9139

Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is implemented entirely in client-side JavaScript in login.zhtml, exposing static plaintext credentials in the page source. Unauthenticated attackers with network access can recover administrative credentials directly from the client-side validate() function to obtain full administrative access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Taiko Network Communications Pte Ltd. AG1000-01A SMS Alert Gateway

Default version status: unknown

  • Rev 7.3affected
  • Rev 8affected
  • UM-AG1000_R7.2affected

References