EA
Product
EasyWeb
by Weintek · last CVE Jul 24, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 4Low 0
Watch

Add EasyWeb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-60134
8.8
1%
Jul 24
Weintek cMT3092X Reliance on Cookies without Validation and Integrity Checking in a Security Decision
Affected: before v2.1.20
CVE-2026-61892
8.8
1%
Jul 24
Weintek cMT3092X Incorrect Permission Assignment for Critical Resource
Affected: before v2.1.20
CVE-2024-55022
8.8
1%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter
Affected: 2.1.53
CVE-2024-55019
7.5
0%
Mar 3
Incorrect access control in the component download_wb.cgi of Weintek cMT-3072XH2 easyweb Web Version v2.1.53, OS v20231011 allows unauthenticated attack to download arbitrary…
Affected: 2.1.53
CVE-2024-55021
7.5
0%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password in the FTP protocol
Affected: 2.1.53
CVE-2024-55027
7.5
0%
Mar 3
Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in plaintext in the component uac_temp.db
Affected: 2.1.53
Showing 6