Is CVE-2026-29797 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-29797 being exploited in the wild.

How severe is CVE-2026-29797?

High severity, with a CVSS score of 7.1, published 9 October 2026.

Which products and versions are affected?

Red Lion Controls N-Tron 700 Series <=Firmware 3.11.0, <=Bootloader 2.0.6.1.

How is CVE-2026-29797 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-29797?

Check whether you run Red Lion Controls N-Tron 700 Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-29797: Red Lion Controls N-Tron 700 Series firmware authentication bypass

Q: Is there a fix for CVE-2026-29797?

Yes: fixed in Firmware 3.11.1 or greater. Until then: Configure or disable SNMP communities and disable access to the web GUI until the device can be upgraded to version 3.11.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-29797 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2026-29797?

Check whether you run Red Lion Controls N-Tron 700 Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-29797 · Severity: high · CVSS 7.1 · Published 2026-10-09

Red Lion Controls N-Tron 700 Series is an industrial network switch used in manufacturing and critical infrastructure environments. An attacker can push malicious firmware or bootloader updates to the device without authentication, or remotely scan for and manipulate devices via unauthenticated SNMP/TFTP protocols. Successful exploitation allows complete administrative control, leading to device compromise, configuration tampering, and potential network disruption.

Technologies: Red Lion Controls N-Tron 700 Series. Vendors: Red Lion Controls.

Quick answers

Is CVE-2026-29797 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-29797 being exploited in the wild.
How severe is CVE-2026-29797?: High severity, with a CVSS score of 7.1, published 9 October 2026.
Which products and versions are affected?: Red Lion Controls N-Tron 700 Series <=Firmware 3.11.0, <=Bootloader 2.0.6.1.
Is there a fix for CVE-2026-29797?: Yes: fixed in Firmware 3.11.1 or greater. Until then: Configure or disable SNMP communities and disable access to the web GUI until the device can be upgraded to version 3.11.1 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-29797 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-29797?: Check whether you run Red Lion Controls N-Tron 700 Series at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Firmware 3.11.1 or greater

Configure or disable SNMP communities and disable access to the web GUI until the device can be upgraded to version 3.11.1 or later.

Technical details

The N-Tron 700 Series lacks authentication for firmware and bootloader update operations (CWE-798: use of hard-coded credentials). An attacker on the network can initiate SNMP/TFTP transfers without credentials to push or pull firmware, or enumerate devices within a network. This enables unauthenticated code execution with full administrative privilege. A fix is available in firmware version 3.11.1 and later.

Affected products

Red Lion Controls N-Tron 700 Series <=Firmware 3.11.0, <=Bootloader 2.0.6.1

Timeline

2026-10-09: disclosed
2026-10-15: advisory: CISA ICSA-26-281-01 Update A issued

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.