CVE-2025-2766

CVE-2025-2766 is an authentication bypass vulnerability affecting 70mai A510 devices, stemming from the use of a default password in user accounts. This flaw allows network-adjacent attackers to bypass authentication without requiring user interaction. With a CVSS score of 8.8 (High), successful exploitation grants attackers root-level arbitrary code execution, leading to high impact on confidentiality, integrity, and availability. Currently, there is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.