CVE-2026-3670: Freedom Factory dGEN1 com.dgen.alarm improper authorization

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-03-07 · updated 2026-06-17
Weakness: CWE-266

Description

A vulnerability was detected in Freedom Factory dGEN1 up to 20260221. Affected is an unknown function of the component com.dgen.alarm. Performing a manipulation results in improper authorization. The attack requires a local approach. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Freedom Factory dGEN1: 20260221

References

https://gist.github.com/Lytes/0accda73c896ea137db832dc4d81345c
https://vuldb.com/?ctiid.349558
https://vuldb.com/?id.349558
https://vuldb.com/?submit.764704

Get alerted when CVE-2026-3670 or the next vulnerability affects your stack