Vulnerabilities

TI-2026-55475 CVE-2026-80275 · GHSA-wv8r-gc9x-96j9

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

MEDIUM 40

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00251 Published 2026-10-01 No fix listed CWE-425

TI-2026-55476 CVE-2026-80276 · GHSA-g5xq-fc7g-hgv3

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

LOW 39

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00368 Published 2026-10-01 No fix listed CWE-306

Vulnerabilities

Filters

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface