CVE-2016-2296: Meteocontrol Web'log Basic 100

Critical severity, CVSS 9.4. EPSS: 64.3% chance of exploitation in the next 30 days.

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.

Affected products

• Meteocontrol Web'log Basic 100: affected versions not specified
• Meteocontrol Web'log Light: affected versions not specified
• Meteocontrol Web'log Pro: affected versions not specified
• Meteocontrol Web'log Pro Unlimited: affected versions not specified

Published 2016-05-14. Last modified 2026-06-17.