Weintek cMT3092X

criticalCVE-2026-60134 CVE-2026-61892 CVE-2026-61886 CVE-2026-60135

View CSAF Summary Successful exploitation of these vulnerabilities could allow a non-privileged user to escalate privileges or view the credentials of other users. The following versions of Weintek cMT3092X are affected: cMT3092X firmware <20210218 EasyWeb <v2.1.20 CVSS Vendor Equipment Vulnerabilities v3 8.8 Weintek Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision, Incorrect Permission Assignment for Critical Resource, Plaintext Storage of a Password, Incorrect User Management Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarters Location: Taiwan Vulnerabilities Expand All + CVE-2026-60134 Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges. View CVE Details Affected Products Weintek cMT3092X Vendor: Weintek Product Version: Weintek cMT3092X firmware: <20210218, Weintek EasyWeb: <v2.1.20 Product Status: known_affected Remediations Vendor fix Weintek recommends users apply the patch package named cmt_typeB_20260316_007.patch, which contains a newer EasyWeb 2.3.17-typeb. This fix will be delivered as a patch-only update; no separate standard firmware release is planned. Users may request the patch directly from Weintek support (https://www.weintek.com/globalw/Support/Knowledge.aspx) or from distributors. https://www.weintek.com/globalw/Support/Knowledge.aspx Mitigation Weintek has published a document with more details about this issue at https://dl.weintek.com/public/Document/TEC/TEC25003E_cMT_EasyWeb_V2_Security_Issues.pdf. https://dl.weintek.com/public/Document/TEC/TEC25003E_cMT_EasyWeb_V2_Security_Issues.pdf Relevant CWE: CWE-784 Reliance on Cookies without Validation and Integrity Checking in a Security Decision Metrics CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 4.0 8.7 HIGH CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N

CSIRTS triage

vendor: Weintek product: cMT3092X Privilege escalation Information disclosureaffected: <20210218, <v2.1.20

What: Vulnerabilities allow non-privileged users to escalate privileges or view other users' credentials.
Who is affected: Users of cMT3092X firmware versions prior to 20210218 and EasyWeb versions prior to v2.1.20.
Urgency: Remediation is critical due to the potential for privilege escalation.
Action: Update to the latest firmware and EasyWeb versions.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch cMT3092X

Get an email when a new cMT3092X advisory drops — max one per day, one-click unsubscribe.

Details

Source: CISA Cybersecurity Advisories (US · national-cert · site)
Severity: critical
Published: 2026-07-23
Exploitation: Not in CISA KEV at last sync

Original advisory: https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-03

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-601340.32% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 24% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-618920.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-618860.23% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 14% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-601350.21% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 12% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-60134	coverage & exploitation status	NVD · CVE.org
CVE-2026-61892	coverage & exploitation status	NVD · CVE.org
CVE-2026-61886	coverage & exploitation status	NVD · CVE.org
CVE-2026-60135	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Weintek cMT3092X

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-61892: Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.nvd · 2026-07-24
mediumCVE-2026-61886: Weintek cMT3092X HMI stores user account passwords in plaintext.nvd · 2026-07-24
highCVE-2026-60134: Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privilege…nvd · 2026-07-24