CVE-2026-5573: Technostrobe HI-LED-WR120-G2 Unrestricted File Upload
CVE-2026-5573 describes an unrestricted upload weakness in the Technostrobe HI-LED-WR120-G2, mapped to CWE-284 Improper Access Control. The record states the issue can be reached remotely and that a public exploit has been made available, while no vendor response is recorded. NVD assigns a CVSS base score of 9.8, and no fixed version is listed.
Overview
The record describes an unrestricted upload weakness in the Technostrobe HI-LED-WR120-G2, affecting version 5.5.0.1R6.03.30. The weakness is mapped to CWE-284 Improper Access Control. The record states that the attack can be launched remotely and that a public exploit exists.
Impact
An unrestricted upload weakness may allow a remote party to place files on an affected device. NVD assigns a CVSS base score of 9.8 (critical) with high confidentiality, integrity and availability impact in the vector. The SSVC data in the record lists technical impact as partial and automatable as yes. The record does not describe the concrete consequences in specific deployments, so these remain unknown.
Affected products and versions
- Technostrobe HI-LED-WR120-G2, version 5.5.0.1R6.03.30
- Technostrobe Hi-led-wr120-g2 Firmware, version 5.5.0.1r6.03.30
No fixed version is listed in the record. The only fix entry is typed as mitigation and points to third-party research material rather than a vendor patch. Because the vendor did not respond to early contact, the availability of a vendor fix is unknown.
Exploitation status
The KEV listing is false, so no confirmed active exploitation appears in the sources consulted. The description states that an exploit has been made publicly available and could be used for attacks, and a third-party repository tagged as an exploit is referenced. SSVC records exploitation as proof of concept. The EPSS probability is 0.00704 with a percentile of 0.52803.
Remediation and mitigation
- Do not expose the device web or file management interfaces to the internet; restrict them to trusted administrative networks.
- Place the device in a segment that limits lateral movement to other systems.
- Ask the vendor for a firmware update or advisory, since no vendor response is recorded.
- Review the mitigation material linked in the record and validate any measure against your own risk assessment before applying it.
- If the device is reachable from untrusted networks, consider isolating or retiring it until a vendor fix is confirmed.
Detection guidance
- Review device and web access logs for unexpected file creation or uploads in the file system area.
- Monitor for unexpected new files or configuration changes on the device.
- Alert on management interface access originating from external addresses.
Limitations of the available information
The record does not state the exact preconditions for exploitation, whether a vendor fix exists, or whether other firmware versions are affected. Other scores in the record from VulDB and the CNA range from 5.5 to 7.5, while NVD lists 9.8. The vendor position is unknown.
Frequently asked questions
Is CVE-2026-5573 being actively exploited?
The KEV listing is false, so no confirmed active exploitation appears in the sources consulted. The record does state that a public exploit has been made available and could be used for attacks.
Is there a vendor fix for this issue?
The record lists no fixed version. The only fix entry is a mitigation reference to third-party research, and the vendor did not respond to early contact, so vendor fix availability is unknown.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.