METIS WIC vulnerabilities

2 known vulnerabilities in METIS WIC from METIS Cyberspace Technology SA. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  METIS WIC: Insertion of Sensitive Information Into Debugging Code

  CVE-2026-2250Feb 11, 2026METIS Cyberspace Technology SA

  The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is configured with debug mod

• 9.8 Critical severity

  METIS WIC: Improper Authentication

  CVE-2026-2248Feb 11, 2026METIS Cyberspace Technology SA

  METIS WIC devices (versions <= oscore 2.1.234-r18) expose a web-based shell at the /console endpoint that does not require authentication. Accessing this endpoint allows a remote attacker to execute arbitrary operating system commands with root (UID 0) privile