UNIVERGE IX-R/IX-V vulnerabilities

2 known vulnerabilities in UNIVERGE IX-R/IX-V from NEC. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  UNIVERGE IX-R/IX-V: Missing Authentication for Critical Functionality

  CVE-2026-16876Sep 7, 2026NEC

  An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user could bypass authentication and execute arbitrary CLI commands by tampering with WebGUI messages and sending them to the device via internet.

• 7.2 High severity

  UNIVERGE IX: Improper Neutralization of Special Elements used in a Command

  CVE-2024-11013Nov 29, 2024NECEPSS 1.1%

  Command Injection vulnerability in NEC Corporation UNIVERGE IX from Ver9.2 to Ver10.10.21, for Ver10.8 up to Ver10.8.27, for Ver10.9 up to Ver10.9.14 and UNIVERGE IX-R/IX-V Ver1.2.15 and earlier allows a attacker to inject an arbitrary CLI commands to be execu