CVE-2026-32962 describes a missing authentication vulnerability in silex technology, Inc.'s SD-330AC and AMC Manager products. Specifically, critical functions related to device configuration can be accessed and altered without any authentication, potentially allowing unauthorized users to change device settings. The affected versions are 1.42 and earlier. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting integrity but not confidentiality or availability. No vendor advisory or patch information is currently provided.

An attacker can alter device configuration without authentication, which may lead to unauthorized changes in device behavior or settings. This impacts the integrity of the device configuration but does not affect confidentiality or availability according to the CVSS vector. There are no known exploits in the wild, and no indication of active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device management interfaces to trusted users only and monitor for unauthorized configuration changes.