CVE-2026-32960

CVE-2026-32960 affects Silex Technology's SD-330AC and AMC Manager devices, stemming from a flaw where sensitive information is retained in resources after reuse. An unauthenticated attacker can exploit this issue by sending a specially crafted packet to gain unauthorized login access to the device without requiring valid credentials. The vulnerability carries a CVSS v3.1 score of 6.5 (Medium), indicating a network-based attack with low complexity and no user interaction required, though integrity impact is high while confidentiality and availability are not compromised. The attack vector is particularly concerning as it allows remote exploitation without authentication barriers. This vulnerability is not currently listed in CISA's Known Exploited Vulnerabilities catalog and shows no evidence of active exploitation. The FAUCET Risk Score of 35.0 and extremely low EPSS score suggest limited current threat activity, though organizations running the affected Silex devices should prioritize patching to prevent potential future attacks exploiting this authentication bypass.