CVE-2026-32960 affects silex technology, Inc.'s SD-330AC and AMC Manager products (version 1.42 and earlier). The issue arises because sensitive information is not removed from a resource before it is reused, which can be exploited by an attacker to bypass authentication. Specifically, an attacker can send a crafted packet to the device and gain login access without knowing the password. The vulnerability has a CVSS 3.1 base score of 6.5, with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No official patch or remediation level has been disclosed by the vendor as of the publication date.

An attacker can gain unauthorized login access to the affected device without knowing the password, potentially allowing them to alter device settings or perform unauthorized actions. The integrity of the device is at risk, but confidentiality and availability are not directly impacted according to the CVSS vector. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit network exposure of affected devices and monitor for unusual login attempts. Avoid relying on user interaction for security as the attack requires it. Follow vendor channels for updates on patches or official mitigations.