This vulnerability (CVE-2026-2624) affects Antikor NGFW versions starting from 2.0.1298 before 2.0.1301 and is classified under CWE-306 (Missing Authentication for Critical Function). It allows an attacker to bypass authentication mechanisms, potentially gaining unauthorized access to critical firewall functions. The CVSS 3.1 base score is 9.8, reflecting network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to bypass authentication controls on the firewall, potentially leading to full compromise of the device's security functions. This could result in unauthorized access, manipulation, or disruption of firewall operations, severely impacting network security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected firewall versions and monitor for any suspicious activity related to authentication bypass attempts. Avoid deploying affected versions in untrusted environments.