High severity · published Feb 17, 2026
CVE-2026-2618
Beetel 777VR1 SSH Service risky encryption
7.4
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was determined in Beetel 777VR1 up to 01.00.09. This impacts an unknown function of the component SSH Service. This manipulation causes risky cryptographic algorithm. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is said to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
77
777VR1 · Beetel
01.00.09 · source: vendor
7F
777vr1 Firmware · Beetel
through 01.00.09_55 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-2618
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-2618
Exploit
https://gist.github.com/raghav20232023/8e8e559f80e2d596cb6154747f69a081
Exploit
https://gist.github.com/raghav20232023/8e8e559f80e2d596cb6154747f69a081#proof--steps-to-reproduce
Permissions Required
https://vuldb.com/?ctiid.346268
Third Party Advisory
https://vuldb.com/?id.346268
Exploit
https://vuldb.com/?submit.751633
More from 777VR1
9.8
CVE-2026-2616
Beetel 777VR1 Web Management hard-coded credentials
8.8
CVE-2026-2617
Beetel 777VR1 Telnet Service/SSH Service insecure default initialization of resource
6.4
CVE-2026-1410
Beetel 777VR1 UART missing authentication
6.1
CVE-2026-1411
Beetel 777VR1 UART access control
4.2
CVE-2026-1409
Beetel 777VR1 UART excessive authentication