CVE-2026-80276: Comelit Group S.p.a 1456b Multi-User Gateway

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read in cleartext by a remote, unauthenticated attacker.

Affected products

• Comelit Group S.p.a 1456b Multi-User Gateway: version 2.9.1 only; version 2.10.0 only

Published 2026-10-01. Last modified 2026-10-05.