High severity · published Feb 17, 2026
CVE-2026-2617
Beetel 777VR1 Telnet Service/SSH Service insecure default initialization of resource
8.8
CVSS
0.6%
EPSS
No
On KEV
Description
A vulnerability was found in Beetel 777VR1 up to 01.00.09. This affects an unknown function of the component Telnet Service/SSH Service. The manipulation results in insecure default initialization of resource. The attack can only be performed from the local network. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 49% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
77
777VR1 · Beetel
01.00.09 · source: vendor
7F
777vr1 Firmware · Beetel
through 01.00.09_55 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-2617
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-2617
Exploit
https://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0
Exploit
https://gist.github.com/raghav20232023/39e3d88d1bc2bcef89bb0f3b5fbb73e0#proofsteps-to-reproduce
Permissions Required
https://vuldb.com/?ctiid.346267
Third Party Advisory
https://vuldb.com/?id.346267
Exploit
https://vuldb.com/?submit.751436
Exploit
https://vuldb.com/?submit.751568
More from 777VR1
9.8
CVE-2026-2616
Beetel 777VR1 Web Management hard-coded credentials
7.4
CVE-2026-2618
Beetel 777VR1 SSH Service risky encryption
6.4
CVE-2026-1410
Beetel 777VR1 UART missing authentication
6.1
CVE-2026-1411
Beetel 777VR1 UART access control
4.2
CVE-2026-1409
Beetel 777VR1 UART excessive authentication