CVE-2025-26408

CVE-2025-26408: Unprotected JTAG Interface

Vendor Wattsense
Product Wattsense Bridge
Weakness CWE-1191
Published February 11, 2025
Last update November 3, 2025

CVSS base score

What the vulnerability does

01Description

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.

Key dates

02Disclosure timeline

February 11, 2025 CVE published
November 3, 2025 Record updated