*Avation Light Engine Pro *

Summary

Vulnerabilities 1

• Critical 9.3
  CVE-2026-1341

  Missing Authentication for Critical Function in Avation Light Engine Pro

  Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control.

  Avation Avation Light Engine Pro
  Feb 3, 2026

Revision history

1. 2026-02-03 #1

   Initial Publication

References

• ICSA Advisory ICSA-26-034-02 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-26-034-02
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
• Recommended Practices
  https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b
• Recommended Practices
  https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing
• Recommended Practices
  https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks