CVE-2026-61892

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...

CVE-2026-61886

Weintek cMT3092X HMI stores user account passwords in plaintext...

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-60134 Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...

CVE-2026-60134

Vulnerability: CVE-2026-60134 affects the Weintek cMT3092X HMI due to reliance on cookies without proper validation and integrity checks in a security decision. What’s affected: Weintek cMT3092X HMI. The description states that a non-privileged user can modify cookies to achieve elevated privileg...

CVE-2026-61892 Weintek cMT3092X Incorrect Permission Assignment for Critical Resource

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...

CVE-2026-61892

The CVE-2026-61892 entry applies to Weintek cMT3092X HMI. The vulnerability concerns insufficient permission handling that lets a non-privileged user modify tokens to escalate privileges, yielding a high-severity impact on confidentiality, integrity, and availability per the ICS CVSS metrics (sco...

CVE-2026-61886 Weintek cMT3092X Plaintext Storage of a Password

Weintek cMT3092X HMI stores user account passwords in plaintext...

CVE-2026-61886

Weintek cMT3092X HMI is affected by CVE-2026-61886 due to plaintext storage of user account passwords. The vulnerability resides in how credentials are stored, enabling potential exposure of confidential data. Affected component: Weintek cMT3092X HMI (password storage mechanism). Root cause: plai...

CVE-2026-60135 Weintek cMT3092X Incorrect User Management

An attacker can modify data that should be restricted to read‑only access...

CVE-2026-60135

No technical details are publicly available in the provided documents. Monitor for updates.

PT-2026-64422

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description The Weintek cMT3092X HMI contains a flaw where it relies on cookies without proper validation and integrity checking during security decisions. This allows a non-privileged user to...

PT-2026-64425

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description An incorrect permission assignment for critical resources in the Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. Recommendations At the...

PT-2026-64424

Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description The HMI stores user account passwords in plaintext, which allows an attacker with access to the storage to retrieve sensitive credentials. Recommendations At the moment, there is no...