CVE Intelligence

Mennekes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mennekes products: 2 record(s), with severity, exploitation and fixes.

Amtron 2

Exploited only (KEV) →

CVE-2026-8980 Critical · 9.3 CWE-269 May 28, 2026
Privilege Escalation
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.
CVE-2026-8979 Critical · 9.3 CWE-287 May 28, 2026
Authentication Bypass
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account via a crafted POST request to the /operator/operator endpoint.