CVE-2026-8980

The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - office@cyberdanube.com

Published

2026-05-28

Last modified

2026-10-26

Weaknesses

CWE-269

Affected products

• Amtron (Mennekes)

References

• https://cyberdanube.com/security-research/multiple-vulnerabilities-in-mennekes-amtron-series/