CVE-2026-61886

MediumCVSS 6.5

Published: 24/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The Weintek cMT3092X HMI terminal stores user account passwords in plaintext.

Risk Assessment

Anyone with physical or remote access to the device can read passwords, enabling unauthorized access to the HMI system and potentially to controlled industrial processes.

Recommendation

Change the password storage method to a secure one (e.g., salted hash). Contact the manufacturer for a firmware update.

Other vulnerabilities in Weintek cMT3092X HMI

See all

CVE-2026-61892High
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.
CVE-2026-60134High
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

Original NVD description (English source)

Weintek cMT3092X HMI stores user account passwords in plaintext.