CVE-2026-80276

27th percentile - higher than 27% of all known CVEs

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

An unauthenticated attacker can access sensitive configuration data, potentially enabling further compromise of the device or the entire security system.

Update the device firmware to a version that requires authentication for the management interface. Restrict network access to the management interface to trusted hosts only.