PT-2026-103697 · Comelit Group S.P.A. · 1456B Multi-User Gateway

Juha Jussila

+1

·

CVE-2026-80275

·

Published

2026-10-01

·

Updated

2026-10-01

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2026-80275

Affected Products

1456B Multi-User Gateway