{"id":"CVE-2026-80275","published":"2026-10-01T06:17:09.720","lastModified":"2026-10-05T11:17:00.570","description":"Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-425"],"vendors":[],"products":[],"references":[{"url":"https://accesscontrol.fail/comelit-1456b/","tags":[]},{"url":"https://pro.comelitgroup.com/en-us/product/1456B","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Comelit Multi-User Gateway for VIP System allows an authenticated user to change the installer/administrator password, leading to potential unauthorized access.","exploitability":"Exploitation requires an authenticated user with administrative privileges, making it moderately hard to exploit.","blast_radius":"If exploited, this flaw could grant an attacker full control over the gateway, potentially leading to data theft or system compromise.","remediation":"Upgrade to firmware version 2.10.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","firmware","iot"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-03T08:52:05.069Z"}}