Critical 10.0Published Feb 3, 2026

CVE-2026-1633Synectix LAN 232 TRIO Missing Authentication for Critical Function

Updated under an hour ago (Oct 26, 2026, 10:40 AM ET)

Does this affect you?

It affects Synectix LAN 232 TRIO. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Synectix LAN 232 TRIO

Exploited in the last 30 days

The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowing unauthenticated users to modify critical device settings or factory reset the device.

CVSS: 10.0 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-306
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: icscert
NVD analysis: Deferred
Record last updated: Feb 4, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Synectix LAN 232 TRIO synectix:lan_232_trio (from the name)	all versions	CNA record

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-04
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-034-04.json

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.