CVE-2026-9141

Vulnerability

The Taiko AG1000-01A SMS Alert Gateway firmware revisions 7.3 and 8 contain an authentication bypass vulnerability in the embedded web configuration interface [1]. The interface does not enforce any session management or server-side authentication checks, allowing unauthenticated attackers to directly access internal application pages such as index.zhtml, point.zhtml, and log.shtml [1].

Exploitation

An attacker with network access to the device can exploit this vulnerability by sending HTTP requests to the unprotected internal pages without any authentication [1]. No user interaction or prior access is required. The attacker can directly navigate to administrative endpoints to perform actions.

Impact

Successful exploitation grants the attacker full administrative read and write access to the device [1]. This enables unauthorized modification of alarm routing, device configuration, and disruption of monitoring and control functions [1]. The attacker can potentially compromise the entire SMS alert gateway.

Mitigation

As of the publication date (2026-05-20), no official patch has been released for this vulnerability [1]. Until a fix is available, organizations should restrict network access to the web interface, place the device behind a firewall, and implement network segmentation to limit exposure [1].