Vulnerabilities

TI-2026-42842 CVE-2026-60134 · GHSA-fgcj-2p5v-hv7f

Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

MEDIUM 40

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00581 Published 2026-07-24 Fixed in 20210218, v2.1.20 +1 CWE-784

TI-2026-44284 CVE-2026-61892 · GHSA-f56p-33jj-44h8

MEDIUM 40

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00506 Published 2026-07-24 Fixed in 20210218, v2.1.20 +1 CWE-732

TI-2026-44282 CVE-2026-61886 · GHSA-hgch-6f8j-3xgx

LOW 31

Weintek cMT3092X HMI stores user account passwords in plaintext.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00402 Published 2026-07-24 Fixed in 20210218, v2.1.20 +1 CWE-256

TI-2026-42843 CVE-2026-60135 · GHSA-8r5g-w376-c3rg

LOW 31

An attacker can modify data that should be restricted to read‑only access.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00376 Published 2026-07-24 Fixed in 20210218, v2.1.20 +1 CWE-286