medium5.3
CVE-2026-97858
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device i…
Impact
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.