{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/transceiver--7.9/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-104075"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Receiver (\u003c 7.9)","Transceiver (\u003c 7.9)"],"_cs_severities":["critical"],"_cs_tags":["authentication-bypass","cve","network-security"],"_cs_type":"advisory","_cs_vendors":["TVU Networks"],"content_html":"\u003cp\u003eTVU Networks Receiver and Transceiver devices running firmware versions before 7.9 are susceptible to an authentication bypass vulnerability (CVE-2026-104075). The vulnerability exists within the web management login interface at the POST /tvu/Login endpoint. Remote, unauthenticated attackers can successfully authenticate by submitting an HTTP request with an empty or absent UserName parameter. Because the application logic fails to validate the presence of the username before processing the request, the server issues a valid administrative session cookie regardless of whether a password is provided. This flaw allows attackers to bypass standard login procedures and gain full administrative control over the affected device's web management console. Given the nature of these devices in media transport workflows, unauthorized access could lead to the interception or manipulation of broadcast feeds and unauthorized configuration changes.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full administrative access to the affected TVU Networks device. Attackers can modify system configurations, manage broadcast streams, or pivot to internal networks where these devices are deployed. This vulnerability targets broadcast infrastructure and media production environments, posing a significant risk to the integrity and confidentiality of broadcast operations.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized actions for security operations and IT teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003ePatch all TVU Networks Receiver and Transceiver devices to firmware version 7.9 or later immediately.\u003c/li\u003e\n\u003cli\u003eRestrict access to the web management interface of these devices to authorized management subnets via firewall rules.\u003c/li\u003e\n\u003cli\u003eMonitor web server access logs for anomalous POST requests to /tvu/Login originating from unauthorized internal or external IP addresses.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-08T21:59:16Z","date_published":"2026-10-08T21:59:16Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-104075/","summary":"TVU Networks Receiver and Transceiver firmware versions prior to 7.9 contain an authentication bypass vulnerability in the /tvu/Login endpoint, allowing unauthenticated attackers to gain administrative sessions.","title":"Authentication Bypass in TVU Networks Receiver and Transceiver Devices","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-104075/"}],"language":"en","title":"CraftedSignal Threat Feed - Transceiver (\u003c 7.9)","version":"https://jsonfeed.org/version/1.1"}