CVE-2026-32957 describes a missing authentication vulnerability in the firmware maintenance functionality of silex technology, Inc.'s SD-330AC and AMC Manager products. This flaw permits unauthenticated attackers to upload arbitrary files to the affected devices, potentially leading to unauthorized modification of device firmware or configuration. The vulnerability affects versions 1.42 and earlier. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact.

An attacker can upload arbitrary files to the device without authentication, which may allow unauthorized modification of firmware or configuration. This could lead to integrity issues on the device. There is no direct confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device's firmware maintenance interface to trusted administrators only to reduce exposure.