CVE-2026-80275 — Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint

CVE-2026-80275

Comelit 1456B gateway allows low priviledge user to overwrite installer password via unauthorized endpoint PUBLISHED

Description (CNA)

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

Affected (CNA)

Vendor / product	Versions
Comelit Group S.p.A. / 1456B Multi-User Gateway	affected 2.9.1; affected 2.10.0

CWE

CWE-425

References

https://pro.comelitgroup.com/en-us/product/1456B
https://accesscontrol.fail/comelit-1456b/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.