Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-80275 Details

Description

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: National Cyber Security Centre FinlandCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://pro.comelitgroup.com/en-us/product/1456B	National Cyber Security Centre Finland

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-425	Direct Request ('Forced Browsing')	National Cyber Security Centre Finland

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes