High severity8.8NVD Advisory· Published Oct 1, 2026

CVE-2026-80275

Description

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

Affected products

Comelit/Multi-User Gateway for VIP Systemllm-create
Range: 2.9.1, 2.10.0
Comelit/1456Bllm-create
Range: 2.9.1, 2.10.0

Patches

Vulnerability mechanics

References

pro.comelitgroup.com/en-us/product/1456Bnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000