CVE-2026-60134

Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

Scoring

Severity

HIGH

CVSS base score

8.8

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS probability

0.33%

CWE

CWE-784

Published

2026-07-24

Last modified

2026-07-27

Affected products

• Weintek cMT3092X firmware
• Weintek EasyWeb
• Weintek EasyWeb

Weakness type

• CWE-784

Related vulnerabilities

• CVE-2026-45055 — CubeCart: Pre-Authenticated Password Reset Link Poisoning via HTTP Host Header
• CVE-2024-9820 — WP 2FA with Telegram <= 3.0 - Two-Factor Authentication Bypass

Markdown version · Browse all CVEs