Quick answers
- Is CVE-2026-16876 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-16876 being exploited in the wild.
- How severe is CVE-2026-16876?
- Informational severity, published 7 September 2026.
- Which products and versions are affected?
- NEC UNIVERGE IX-R/IX-V.
- Is there a fix for CVE-2026-16876?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-16876 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-16876?
- Check whether you run Nec UNIVERGE IX-R/IX-V. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An authentication bypass vulnerability exists in the WebGUI of the UNIVERGE IX-R/IX-V series, where insufficient validation of WebGUI messages allows an unauthenticated attacker to inject and execute arbitrary CLI commands. The vulnerability is exploitable over the network by tampering with WebGUI protocol messages and sending them directly to the device. An attacker does not require valid credentials or user interaction to trigger the flaw. Successful exploitation permits complete command execution with device privileges. Patch availability has not been confirmed from the advisory text.
Affected products
- NEC UNIVERGE IX-R/IX-V
Timeline
- 2026-09-07: disclosed