Skip to content
OpenAdvisories
High · 8.8 CVE-2026-61892 EUVD-2026-48749GHSA-f56p-33jj-44h8

Weintek cMT3092X Incorrect Permission Assignment for Critical Resource

Published Jul 24, 2026 · Updated Jul 27, 2026 · Assigned by icscert

Vendor: Weintek Product: cMT3092X firmware Product: EasyWeb

Description

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

Affected products

VendorProductAffectedFixed
Weintek cMT3092X firmware < 20210218 20210218
Weintek EasyWeb < v2.1.20 v2.1.20

Advisories 1

References