Jung-group Enet Smart Home — known CVE vulnerabilities

Every CVE whose affected-product data names Jung-group Enet Smart Home, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-26366 — CVSS 9.8 (critical): eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and…
• CVE-2026-26369 — CVSS 9.8 (critical): eNet SMART HOME server 2.2.1 and 2.3.1 contains a privilege escalation vulnerability due to insufficient authorization checks in the…
• CVE-2026-26368 — CVSS 8.8 (high): eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the resetUserPassword JSON-RPC method that allows…
• CVE-2026-26367 — CVSS 8.1 (high): eNet SMART HOME server 2.2.1 and 2.3.1 contains a missing authorization vulnerability in the deleteUserAccount JSON-RPC method that permits…