What is GHSA-xw9f-4565-4fvc?

GHSA-xw9f-4565-4fvc is a security advisory published by GitHub Security Advisories with High severity. WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists...

Which CVE IDs does GHSA-xw9f-4565-4fvc cover?

GHSA-xw9f-4565-4fvc covers the following CVE IDs: CVE-2026-40856. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-xw9f-4565-4fvcHigh

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists...

Vendor

GitHub Security Advisories

Published

September 16, 2026

Last Modified

September 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-40856 →

📋 Description

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi passphrase, and technical device information.This issue has been fixed in firmware version 1.1.0.651412

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-40856
https://cert.pl/posts/2026/09/CVE-2026-40854
https://github.com/advisories/GHSA-xw9f-4565-4fvc