Is CVE-2026-110110 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110110?

CVE-2026-110110 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-110110

Description

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the AlarmConfigController _enable and _disable endpoints lack the save action annotation, attackers can toggle alarms by id to silence alerts for monitored devices.