# CVE-2026-5569: Technostrobe HI-LED-WR120-G2 broken access control in Endpoint

Source: https://junglewise.ai/threats/cve-2026-5569-technostrobe-hi-led-wr120-g2-broken-access-control-in-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-05. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-5569 · Severity: high · CVSS 7.3 · Published 2026-04-05

Technostrobe tower lights, which are critical safety systems used to prevent aircraft from colliding with tall structures like skyscrapers and wind turbines, contain a severe security flaw. An unauthorized person can remotely access the device's management interface to view surveillance data, modify alarm settings, or change user passwords. This could allow an attacker to disable or manipulate aviation safety lighting, posing a significant risk to public safety and infrastructure operations.

Technologies: [Technostrobe Hi-Led-Wr120-G2](https://junglewise.ai/threats/technologies/hi-led-wr120-g2), [Technostrobe Hi-Led-Wr120-G2 Firmware](https://junglewise.ai/threats/technologies/hi-led-wr120-g2-firmware). Vendors: [Technostrobe](https://junglewise.ai/threats/vendors/technostrobe).

## Quick answers

**Is CVE-2026-5569 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5569 being exploited in the wild.

**How severe is CVE-2026-5569?** High severity, with a CVSS score of 7.3, published 5 April 2026.

**Which products and versions are affected?** Technostrobe Hi-Led-Wr120-G2 Firmware 5.5.0.1R6.03.30.

**Is there a fix for CVE-2026-5569?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-5569 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2026-5569?** Check whether you run Technostrobe Hi-Led-Wr120-G2 or Technostrobe Hi-Led-Wr120-G2 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Technostrobe HI-LED-WR120-G2 firmware version 5.5.0.1R6.03.30 suffers from multiple Broken Access Control (BAC) vulnerabilities (CWE-284, CWE-266) within its web-based management interface. The application fails to enforce authentication or authorization checks on several critical endpoints under the /Technostrobe/ directory, including surveillance pages, alarm configurations, and password management functions. A remote, unauthenticated attacker can exploit these flaws to monitor system status, modify safety parameters, or perform a full account takeover by resetting any user's password. As of the disclosure date, the vendor has not responded to reports, and no patch is currently available.

## Affected products

- Technostrobe HI-LED-WR120-G2 firmware 5.5.0.1R6.03.30

## Timeline

- 2026-04-05: disclosed: Initial public disclosure via VulDB and researcher GitHub
- 2026-04-05: advisory: CVE-2026-5569 assigned

## References

- [https://github.com/shiky8/my--cve-vulnerability-research/blob/main/my_VulnDB_cves/CVE-TECHNOSTROBE-01-BrokenAccessControl.md](https://github.com/shiky8/my--cve-vulnerability-research/blob/main/my_VulnDB_cves/CVE-TECHNOSTROBE-01-BrokenAccessControl.md)
- [https://vuldb.com/submit/783322](https://vuldb.com/submit/783322)
- [https://vuldb.com/vuln/355339](https://vuldb.com/vuln/355339)
- [https://vuldb.com/vuln/355339/cti](https://vuldb.com/vuln/355339/cti)

## Related threats

- [Technostrobe HI-LED-WR120-G2 unauthenticated file deletion in FsBrowseClean](https://junglewise.ai/threats/cve-2026-5574-technostrobe-hi-led-wr120-g2-unauthenticated-file-deletion-in)
- [Technostrobe HI-LED-WR120-G2 unauthenticated file upload in /fs](https://junglewise.ai/threats/cve-2026-5573-technostrobe-hi-led-wr120-g2-unauthenticated-file-upload-in-fs)
- [Technostrobe HI-LED-WR120-G2 CSRF in web interface](https://junglewise.ai/threats/cve-2026-5572-technostrobe-hi-led-wr120-g2-csrf-in-web-interface)
- [Technostrobe HI-LED-WR120-G2 unauthenticated information disclosure in /fs](https://junglewise.ai/threats/cve-2026-5571-technostrobe-hi-led-wr120-g2-unauthenticated-information)
- [Technostrobe HI-LED-WR120-G2 auth bypass in /LoginCB](https://junglewise.ai/threats/cve-2026-5570-technostrobe-hi-led-wr120-g2-auth-bypass-in-logincb)