CVE-2026-8980 - Privilege Escalation

Back Back to CVE browser

CRITICAL

Privilege Escalation

Published May 28, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.41%

Description

The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator) and manufacturer accounts via crafted POST requests.

Affected products

Vendor Mennekes Product Amtron Default
affected
- Version
  0
  Status
  affected
  Constraints
  <=5.22.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mennekes

Amtron

affected

Version	Status	Constraints
0	affected	<=5.22.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

Link	Providers	Tags
https://cyberdanube.com/security-research/multiple-vulnerabilities-in-mennekes-amtron-series/		exploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32897		Advisory