CVE-2026-8233

CVE Enrichment

CVSS: 2.1 LOW
EPSS: 0.19%
EPSS Percentile: 8.56%
CISA KEV: Not listed

Description

A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. A high degree of complexity is needed for the attack. The exploitability is told to be difficult. The vendor was contacted early about this disclosure.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 10-May-2026 13:16
Last Modified: 24-Jul-2026 14:10
EPSS Date: 2026-10-25
CWE: CWE-266, CWE-284

CVSS Vector


            CVSS:4.0                            AV:A /
                            AC:H /
                            AT:N /
                            PR:L /
                            UI:N /
                            VC:L /
                            VI:L /
                            VA:L /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

References

Last enrichment sync: 26-Oct-2026 14:19
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

One vendor, Dotouch, has since addressed the defect in XproUPF (CVE-2026-8233, CVSS score: 4.6). Researchers Find 84 Implicit Trust Flaws in 4G and 5G Core Networks

People (1)

MITRE ATT&CK (2)

Vendors (1)

Products (6)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.