Is CVE-2026-97858 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-97858?

CVE-2026-97858 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-97858

Description

An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.