CVE-2020-11926: Luvion Grand Elite 3 Connect

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a username and password. These credentials can be obtained through an unauthenticated web request, e.g., for a JavaScript file. Also, the disclosed information includes the SSID and WPA2 key for the Wi-Fi network the device is connected to.

Affected products

• Luvion Grand Elite 3 Connect: up to and including 2020-02-25

Published 2024-11-07. Last modified 2026-06-17.