Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/10/01 5:51 a.m.•50 views

CVE-2026-80275 Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...

8.8CVSS0.00251EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 5:51 a.m.•14 views

CVE-2026-80275 Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer administrator account password...

8.8CVSS5.8AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/01 5:51 a.m.•36 views

CVE-2026-80275

The Comelit Multi-User Gateway for VIP System (model 1456B) is vulnerable in firmware versions 2.9.1 and 2.10.0 due to a failure to enforce server-side authorization on an administrative password-change function. This flaw allows an authenticated user level to invoke the function and overwrite th...

8.8CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/01 5:51 a.m.•15 views

CVE-2026-80276 Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

7.5CVSS5.7AI score0.00368EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 5:51 a.m.•53 views

CVE-2026-80276 Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...

7.5CVSS0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•11 views

PT-2026-103698

Name of the Vulnerable Software and Affected Versions Comelit Multi-User Gateway for VIP System model 1456B version 2.9.1 Comelit Multi-User Gateway for VIP System model 1456B version 2.10.0 Description A network-accessible management interface does not require authentication. This allows a remot...

7.5CVSS5.8AI score0.00368EPSS
SaveExploits0References5
Rows per page
Query Builder