CVE-2026-5569: Technostrobe HI-LED-WR120-G2 broken endpoint access control

Overview

The record describes an improper access control weakness in the Technostrobe HI-LED-WR120-G2 device, reported against version 5.5.0.1R6.03.30 in the Endpoint component. The record states that multiple endpoints are affected and that the issue is classified under CWE-266.

Impact

• The NVD vector indicates network reachability, no required privileges and no user interaction.
• The NVD base score is 9.8 (critical), with high confidentiality, integrity and availability impact in the vector.
• The SSVC technical impact is recorded as partial, which is a separate assessment from the CVSS score.
• Successful abuse could allow unauthorized access to functions that should be restricted. The exact data or actions reachable are not described in the record.

Affected products and versions

• Technostrobe HI-LED-WR120-G2, version 5.5.0.1R6.03.30
• Technostrobe Hi-led-wr120-g2 Firmware, version 5.5.0.1r6.03.30

The record lists no other affected versions, so the full range of vulnerable releases is unknown.

Exploitation status

The record states that an exploit has been made public. SSVC exploitation is recorded as proof of concept. The CISA KEV catalog does not list this CVE in the record, and no confirmed exploitation in the wild appears in the sources consulted.

Remediation and mitigation

• No vendor fix or patched version is listed in the record, and the vendor did not respond to early disclosure. Check the vendor for any firmware update before relying on this assumption.
• Inventory every deployed device and confirm which firmware versions are running.
• Remove direct exposure of these endpoints to untrusted networks and restrict access to trusted management segments or VPN paths.
• Apply network segmentation and allow-listing so only required systems can reach the device.
• If no fix becomes available, plan replacement or retirement of affected units.
• The record references a third-party repository tagged as a mitigation. Review its content carefully and validate any guidance in a lab before applying it.

Detection guidance

• Review logs and network telemetry for access to the affected endpoints from unexpected sources.
• Alert on successful requests to device functions by unauthenticated or unknown clients.
• Track configuration changes and unusual traffic patterns on segments containing these devices.

Limitations of the available information

• No fixed version, vendor advisory or official patch is present in the record.
• The affected version range beyond the listed version is unknown.
• The specific unknown function and the data it exposes are not described.
• The CWE name is not provided in the record.
• The EPSS probability is a statistical estimate, not confirmation of exploitation.

Frequently asked questions

Is this Technostrobe vulnerability being actively exploited?

The CISA KEV catalog does not list this CVE in the record, and no confirmed exploitation in the wild appears in the sources consulted. The record does state that a public exploit exists, so the risk should be treated as elevated.

Is there a vendor fix for CVE-2026-5569?

No fixed version is listed in the record, and the vendor did not respond to early disclosure. Check the vendor directly for firmware updates and apply network isolation in the meantime.

Which versions are affected?

The record lists version 5.5.0.1R6.03.30 for the hardware product and version 5.5.0.1r6.03.30 for the firmware entry. Other versions are not listed, so the full affected range is unknown.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.