CVE-2026-108578: Information Disclosure in Neterbit NW-431F

This vulnerability affects the Neterbit NW-431F device version 20250715, where an unknown function in the Embedded Web Server component that processes the /sms.json file can be manipulated remotely to disclose information. The CVSS 4.0 score is 6.9 (medium severity), indicating a network attack vector with low complexity and no privileges or user interaction required. The vendor has not provided any response or patch information.

Successful exploitation may lead to unauthorized disclosure of information from the device. The vulnerability is remotely exploitable without authentication or user interaction, which increases the risk of exposure. However, the exact nature and sensitivity of the disclosed information are not detailed in the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded to disclosure attempts and no patch or workaround is provided, users should monitor for updates from the vendor and consider restricting network access to the affected device until a fix is available.