Forced Browsing Vulnerability in CHOCO TEI WATCHER Mini by Inaba

CVE-2025-26689

What is CVE-2025-26689?

A direct request issue exists in the CHOCO TEI WATCHER Mini (IB-MCT001) across all versions, which can be exploited by remote attackers. By sending specially crafted HTTP requests, attackers may gain unauthorized access to sensitive product data, alter essential settings, or even delete critical information. This vulnerability raises significant security concerns as it exposes the device to potential manipulation and unauthorized surveillance.

References