Skip to content
OpenAdvisories
High · 8.8 CVE-2026-60134 EUVD-2026-48750GHSA-fgcj-2p5v-hv7f

Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision

Published Jul 24, 2026 · Updated Jul 27, 2026 · Assigned by icscert

Vendor: Weintek Product: cMT3092X firmware Product: EasyWeb

Description

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

Affected products

VendorProductAffectedFixed
Weintek cMT3092X firmware < 20210218 20210218
Weintek EasyWeb < v2.1.20 v2.1.20

Advisories 1

References