CVE-2026-61892: Weintek CMT3092X Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges.

Affected products

• Weintek CMT3092X Firmware: before 20210218 (fixed in 20210218)
• Weintek Easyweb: before v2.1.20 (fixed in v2.1.20)

Published 2026-07-24. Last modified 2026-07-30.