CVE-2026-80276 — Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface

CVE-2026-80276

Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface PUBLISHED

Description (CNA)

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

Affected (CNA)

Vendor / product	Versions
Comelit Group S.p.A. / 1456B Multi-User Gateway	affected 2.9.1; affected 2.10.0

CWE

CWE-306

References

https://pro.comelitgroup.com/en-us/product/1456B
https://accesscontrol.fail/comelit-1456b/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.