1456b Multi-user Gateway CVEs and Security Vulnerabilities

CVE-2026-80276

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Comelit Group

Products

1456b Multi-user Gateway

CVE-2026-80275

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed