Missing Authentication in UGREEN Network Switch Administrative Interface

CVE-2026-8185

What is CVE-2026-8185?

A significant security flaw has been identified in the UGREEN CM933, specifically involving the Administrative Interface, that permits unauthorized access due to missing authentication mechanisms. This vulnerability requires an attacker to be on the same local network to exploit it effectively. The vendor, UGREEN, has acknowledged the issue and is actively working on a resolution. The fix is anticipated to be included in an upcoming release scheduled for late April, emphasizing the need for users to update their products to maintain network integrity.

References