CVE-2025-41702

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Aug 26, 2025
Source updated: Aug 26, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

egOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

EG400Mk2-D11001-000101

Vendor: Welotec
Product: EG400Mk2-D11001-000101
Platforms: Unknown
Default status: unaffected

EG400Mk2-D11001-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG400Mk2-D11101-000101

Vendor: Welotec
Product: EG400Mk2-D11101-000101
Platforms: Unknown
Default status: unaffected

EG400Mk2-D11101-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG503W

Vendor: Welotec
Product: EG503W
Platforms: Unknown
Default status: unaffected

EG503W · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG503L

Vendor: Welotec
Product: EG503L
Platforms: Unknown
Default status: unaffected

EG503L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG503W_4GB

Vendor: Welotec
Product: EG503W_4GB
Platforms: Unknown
Default status: unaffected

EG503W_4GB · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG503L_4GB

Vendor: Welotec
Product: EG503L_4GB
Platforms: Unknown
Default status: unaffected

EG503L_4GB · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG503L-G

Vendor: Welotec
Product: EG503L-G
Platforms: Unknown
Default status: unaffected

EG503L-G · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-A11101-000101

Vendor: Welotec
Product: EG500Mk2-A11101-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-A11101-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-A11001-000101

Vendor: Welotec
Product: EG500Mk2-A11001-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-A11001-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-B11101-000101

Vendor: Welotec
Product: EG500Mk2-B11101-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-B11101-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-B11001-000101

Vendor: Welotec
Product: EG500Mk2-B11001-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-B11001-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-C11101-000101

Vendor: Welotec
Product: EG500Mk2-C11101-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-C11101-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-C11001-000101

Vendor: Welotec
Product: EG500Mk2-C11001-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-C11001-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-A12011-000101

Vendor: Welotec
Product: EG500Mk2-A12011-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-A12011-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-A11001-000201

Vendor: Welotec
Product: EG500Mk2-A11001-000201
Platforms: Unknown
Default status: unaffected

EG500Mk2-A11001-000201 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG500Mk2-A21101-000101

Vendor: Welotec
Product: EG500Mk2-A21101-000101
Platforms: Unknown
Default status: unaffected

EG500Mk2-A21101-000101 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG602W

Vendor: Welotec
Product: EG602W
Platforms: Unknown
Default status: unaffected

EG602W · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG602L

Vendor: Welotec
Product: EG602L
Platforms: Unknown
Default status: unaffected

EG602L · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG603W Mk2

Vendor: Welotec
Product: EG603W Mk2
Platforms: Unknown
Default status: unaffected

EG603W Mk2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG603L Mk2

Vendor: Welotec
Product: EG603L Mk2
Platforms: Unknown
Default status: unaffected

EG603L Mk2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG802W

Vendor: Welotec
Product: EG802W
Platforms: Unknown
Default status: unaffected

EG802W · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG804W

Vendor: Welotec
Product: EG804W
Platforms: Unknown
Default status: unaffected

EG804W · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG802W_i7_512GB_DinRail

Vendor: Welotec
Product: EG802W_i7_512GB_DinRail
Platforms: Unknown
Default status: unaffected

EG802W_i7_512GB_DinRail · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG802W_i7_512GB_w/o DinRail

Vendor: Welotec
Product: EG802W_i7_512GB_w/o DinRail
Platforms: Unknown
Default status: unaffected

EG802W_i7_512GB_w/o DinRail · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed

EG804W Pro

Vendor: Welotec
Product: EG804W Pro
Platforms: Unknown
Default status: unaffected

EG804W Pro · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0.0.0	`affected`	semver	<v1.7.7	Unavailable	None listed
v1.8.0	`affected`	semver	v1.8.2	Unavailable	None listed