CVE-2026-80275: Comelit Group S.p.a 1456b Multi-User Gateway

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. An authenticated user level can invoke this function to overwrite the installer (administrator) account password.

Affected products

• Comelit Group S.p.a 1456b Multi-User Gateway: version 2.9.1 only; version 2.10.0 only

Published 2026-10-01. Last modified 2026-10-05.