CVE-2026-119746

ProSoft Technology ICX35 devices X35-HWC-A and ICX35-HWC-E contain a login lockout bypass in the integrated module web page. The account lockout mechanism that restricts repeated failed authentication attempts is enforced in client-side JavaScript, so a remote attacker can reset the lockout and...

EUVD-2026-116968

ProSoft Technology ICX35 devices X35-HWC-A and ICX35-HWC-E contain a login lockout bypass in the integrated module web page. The account lockout mechanism that restricts repeated failed authentication attempts is enforced in client-side JavaScript, so a remote attacker can reset the lockout and...

CVE-2026-119746 ProSoft ICX35 Login Lockout Bypass via Client-Side Cookies

ProSoft Technology ICX35 devices X35-HWC-A and ICX35-HWC-E contain a login lockout bypass in the integrated module web page. The account lockout mechanism that restricts repeated failed authentication attempts is enforced in client-side JavaScript, so a remote attacker can reset the lockout and...

CVE-2026-119746

ProSoft Technology ICX35 devices (specifically models X35-HWC-A and ICX35-HWC-E ) are vulnerable to a login lockout bypass in the integrated module web page. The root cause is that the account lockout mechanism, designed to restrict repeated failed authentication attempts, is incorrectly enforced...

PT-2026-137001

ProSoft Technology ICX35 devices X35-HWC-A and ICX35-HWC-E contain a login lockout bypass in the integrated module web page. The account lockout mechanism that restricts repeated failed authentication attempts is enforced in client-side JavaScript, so a remote attacker can reset the lockout and...