Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 12:36:29 +0000 CVE-2026-80275 — Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint https://vulnerability.circl.lu/vuln/cve-2026-80275 <p><strong>Affected:</strong> Comelit Group S.p.A. 1456B Multi-User Gateway</p> <p>Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.</p> <p><strong>Affected:</strong> Comelit Group S.p.A. 1456B Multi-User Gateway</p> <p>Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.</p> https://vulnerability.circl.lu/vuln/cve-2026-80275