EIP-2026-102112

PRE-CVE

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request Forgery

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102112. PoCs published by Yakir Wizman.

AI-analyzed exploit summary This PoC demonstrates a CSRF and password change bypass vulnerability in the WBR-3406 Wireless Broadband NAT Router. By omitting the 'PA' parameter (current password), the router allows password changes without authentication.

Description

WBR-3406 Wireless Broadband NAT Router - Web-Console Password Change Bypass / Cross-Site Request Forgery

Exploits (1)

exploitdb WORKING POC
by Yakir Wizman · textwebappshardware
https://www.exploit-db.com/exploits/29612

This PoC demonstrates a CSRF and password change bypass vulnerability in the WBR-3406 Wireless Broadband NAT Router. By omitting the 'PA' parameter (current password), the router allows password changes without authentication.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Level1 WBR-3406 Wireless Broadband NAT Router
No auth needed
Prerequisites: Network access to the router's web interface · Victim interaction (CSRF)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026