CVE-2026-32958 describes a vulnerability in silex technology, Inc.'s SD-330AC and AMC Manager where a hard-coded cryptographic key is used. This cryptographic weakness could allow an attacker to craft a fake firmware update that an administrative user might apply, compromising the integrity of the device. The vulnerability affects versions 1.42 and earlier. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and no privileges, but requires user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported.

The vulnerability can lead to integrity compromise of the affected device by enabling an attacker to deliver and have installed a fake firmware update if an administrative user is tricked into applying it. This could result in unauthorized code execution or device manipulation. There is no reported impact on confidentiality or availability. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — no official fix or remediation level has been published by the vendor. Users should monitor silex technology, Inc. advisories for updates or patches addressing this issue. Until a fix is available, exercise caution when applying firmware updates and verify the authenticity of update sources to avoid installing fake firmware.