CVE Intelligence

Vulnerabilidades de Mennekes

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Mennekes: 2 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-8980 Crítica · 9.3 CWE-269 28/05/2026
Privilege Escalation
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.
CVE-2026-8979 Crítica · 9.3 CWE-287 28/05/2026
Authentication Bypass
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account via a crafted POST request to the /operator/operator endpoint.