{"vulnerability": "cve-2026-50101", "sightings": [{"uuid": "b8fda019-133d-4bc5-b529-ed7e06937e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50101", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116741270655954829", "content": "\u26a0\ufe0f CVE-2026-50101 (CRITICAL): Naxclow Smart Doorbell X3 uses static relay credentials, allowing attackers who gain access to maintain persistent control, even after resets. No patch yet. Limit network exposure &amp; monitor advisories. https://radar.offseq.com/threat/cve-2026-50101-cwe-262-not-using-password-aging-in-f27f494a #OffSeq #IoTSecurity #CVE202650101", "creation_timestamp": "2026-06-13T06:00:25.355153Z"}, {"uuid": "cb5fac91-3ad7-469e-8cbb-e4695c3f0fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50101", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-162-02", "content": "", "creation_timestamp": "2026-06-11T05:00:00.000000Z"}, {"uuid": "916ef19b-f47f-4453-94b5-ce95d87d9dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50101", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mo5lbnlvfa2z", "content": "Naxclow Smart Doorbell X3 flaw (CRITICAL): Static credentials let attackers keep access after resets. No fix yet \u2014 restrict network exposure &amp; check for vendor updates. https://radar.offseq.com/threat/cve-2026-50101-cwe-262-not-using-password-aging-in-f27f494a #OffSeq #IoTSecurity #CVE202650101", "creation_timestamp": "2026-06-13T06:02:30.394489Z"}, {"uuid": "e4cdc893-e7f0-4d02-8eab-3d4c69c36824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo64276og62n", "content": "\ud83d\udfe0 CVE-2026-50101 - High (8.1)\n\nNaxclow devices use a server-side, per-device relay credential that never rotates and is re-issue...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-50101/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-13T11:00:31.027479Z"}]}