METIS DFS vulnerabilities

1 known vulnerability in METIS DFS from METIS Cyberspace Technology SA. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  METIS DFS: Improper Authentication

  CVE-2026-2249Feb 11, 2026METIS Cyberspace Technology SA

  METIS DFS devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with 'daemon' privileges.