Naxclow Devices Use Non-Rotating, Non-Revocable Per-Device Relay Credential (CVE-2026-50101)
critical-cve-against-infra · active
Naxclow devices rely on a server-side relay credential that is unique per device but never rotates and cannot be reset or revoked by the owner. Anyone who obtains this credential can maintain persistent access to the device's relay channel — enabling long-term impersonation or interception even after factory resets or re-onboarding.