CVE-2026-26367 | JUNG eNet SMART HOME server 2.2.1 (46056)/2.3.1 (46841) HTTP POST Request /jsonrpc/management deleteUserAccount Username authorization (ZSL-2026-5973)

February 15, 2026 Yanac

A vulnerability was found in JUNG eNet SMART HOME server 2.2.1 (46056)/2.3.1 (46841) and classified as problematic. This vulnerability affects the function deleteUserAccount of the file /jsonrpc/management of the component HTTP POST Request Handler. The manipulation of the argument Username results in missing authorization.

This vulnerability is known as CVE-2026-26367. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More