{"schema":"threatline.record/2","record":{"id":"CVE-2026-104075","aliases":[],"summary":"TVU Networks Receiver/Transceiver Authentication Bypass via /tvu/Login","details":"TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login that allows remote unauthenticated attackers to obtain an administrative session by submitting an empty or absent UserName parameter. Attackers can send a crafted HTTP request directly, bypassing client-side JavaScript validation, to receive a valid session cookie regardless of the password value and gain full administrative control of the device's web management interface.","categories":["Unclassified"],"product":"TVU Receiver / Transceiver","vendor":"TVU Networks","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104075","source_modified_at":"2026-10-14T01:15:27.775Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"TVU Receiver / Transceiver","vendor":"TVU Networks","versions":[{"status":"affected","version":"0","versionType":"custom","lessThan":"7.9"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104075","source_modified_at":"2026-10-14T01:15:27.775Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"TVU Receiver / Transceiver","ecosystem":null},"version":"7.9","basis":"first unaffected version stated in the CVE record"}],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00564,"percentile":0.46117,"score_date":"2026-10-23"},"published_at":"2026-10-08T19:24:25.801Z","modified_at":"2026-10-14T01:15:27.775Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-104075","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T01:15:27.775Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-104075","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://code-white.com/public-vulnerability-list/#authentication-bypass-in-tvu-receiver-transceiver-web-management-interface","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/tvu-networks-receiver-transceiver-authentication-bypass-via-tvu-login","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"yes","technical_impact":"total","assessed_at":"2026-10-14T01:15:15.440961Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-14T01:15:27.775Z","content_hash":"72b399ad7b331b4107ffb0ad9a87a77497d8e81cdf6b8c1aeb0d16dfecb7a593"}}