# CVE-2026-7413

## Summary

- **CVE ID:** CVE-2026-7413
- **Severity:** HIGH
- **CVSS Score:** 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** CWE-912
- **Published:** May 7, 2026
- **Last Modified:** May 8, 2026

## Description

A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality. The backdoor is undocumented, cannot be disabled via user-facing settings, and survives factory reset and ordinary firmware updates.

## Affected Products

- Yarbo — Firmware (0)

## References

- [CNA](https://github.com/Bin4ry/yarbo-nat-in-my-back-yard)
- [CNA](https://takeonme.org/gcves/GCVE-1337-2026-00000000000000000000000000000000000000000000000000111111111111111111111110000000000000000000000000000000000000000000000000000000111)
- [CISA-ADP](https://takeonme.org/cves/cve-2026-7413/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.58%
- **EPSS Percentile:** 45.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._