METIS Cyberspace Technology SA vulnerabilities
We track 3 vulnerabilities in METIS Cyberspace Technology SA products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2026.
Latest METIS Cyberspace Technology SA vulnerabilities
- 7.5 High severity
METIS WIC: Insertion of Sensitive Information Into Debugging Code
The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is configured with debug mod
- 9.8 Critical severity
METIS DFS: Improper Authentication
METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with 'daemon' privileges.
- 9.8 Critical severity
METIS WIC: Improper Authentication
METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with root (UID 0) privile