CVE-2026-8979
Severity CVSS v4.0:
CRITICAL
Type:
CWE-287
Authentication Issues
Publication date:
28/05/2026
Last modified:
28/05/2026
Description
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account via a crafted POST request to the /operator/operator endpoint.
Impact
Base Score 4.0
9.30
Severity 4.0
CRITICAL



