Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-8979

Authentication Bypass

The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account via a crafted POST request to the /operator/operator endpoint.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Mennekes
Products
Amtron
CVE-2026-8980

Privilege Escalation

The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Mennekes
Products
Amtron