PatchSiren cyber security CVE debrief
CVE-2026-52482 SJRC CVE debrief
CVE-2026-52482 debrief based on the supplied source corpus. The vulnerability affects SJRC F11 SJ-GPS-PRO firmware build 2019-09-17, allowing remote attackers to obtain sensitive information via the inetd service. Defenders should assess exposure, verify inetd service configuration, and monitor for potential security incidents. Further verification is required to determine affected versions and remediation. This CVE record was published on 2026-09-09T19:17:28.113Z and has not been modified since then.
- Vendor
- SJRC
- Product
- F11 SJ‑GPS‑PRO
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-09-09
- Original CVE updated
- 2026-09-14
- Advisory published
- 2026-09-09
- Advisory updated
- 2026-09-14
Who should care
Defenders responsible for SJRC F11 SJ-GPS-PRO devices should assess exposure and verify inetd service configuration. They should also monitor for potential security incidents and review compensating controls for exposed systems while remediation is scheduled and verified. Additionally, they should confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
Why it matters
CVE-2026-52482 allows remote attackers to obtain sensitive information from SJRC F11 SJ-GPS-PRO devices. Defenders should assess exposure, verify inetd service configuration, and monitor for potential security incidents. Further verification is required to determine affected versions and remediation.
- Verify potential sensitive information disclosure
- Assess exposure of SJRC F11 SJ-GPS-PRO devices
- Monitor for potential security incidents
Technical summary
The CVE-2026-52482 vulnerability affects SJRC F11 SJ-GPS-PRO firmware build 2019-09-17, allowing a remote attacker to obtain sensitive information via the inetd service spawns /app/sh_for_telnet. The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the affected versions and remediation. Defenders should assess exposure, verify inetd service configuration, and monitor for potential security incidents.
Defensive priority
Assess exposure of SJRC F11 SJ-GPS-PRO devices, verify inetd service configuration.
Recommended defensive actions
- Assess exposure of SJRC F11 SJ-GPS-PRO devices
- Verify inetd service configuration
- Monitor for potential sensitive information disclosure
Evidence notes
The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the affected versions and remediation.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-52482 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-52482
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-52482 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-52482
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Source reference
Unverified legacy reference
URL: https://github.com/AshtonKopelevich/SJ-GPS-PRO-F11-Vulnerability
-
Source reference
Unverified legacy reference
URL: https://github.com/AshtonKopelevich/SJ-GPS-PRO-F11-Vulnerability/security/advisories/GHSA-wph3-9w93-pxxq
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.