CVE-2026-32958

CVE-2026-32958 affects Silex Technology's SD-330AC and AMC Manager products, which contain a hard-coded cryptographic key that can be exploited to direct administrative users into applying fraudulent firmware updates. The vulnerability has a CVSS score of 6.5 (Medium severity) with a network-based attack vector requiring minimal complexity and user interaction, but no special privileges. The primary risk is integrity compromise through unauthorized firmware installation, though there is no direct confidentiality or availability impact. Currently, there is no evidence of active exploitation in the wild, no public exploit code availability, and the vulnerability maintains an inactive status on threat tracking lists, resulting in a low EPSS score of 0.0003 indicating minimal current community attention or exploitation likelihood.