CISA ICSA-26-204-03 Weintek cMT3092X ICS Vulnerability Advisory

Vulnerability Overview Vulnerability Name: Weintek cMT3092X Publication Date: July 23, 2026 Alert Code: ICSA-26-204-03 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Affected Products Affected Versions: - cMT3092X firmware <20210218 - EasyWeb <v2.1.20 CVSS Score: v3 8.8 Vendor: Weintek Device: Weintek cMT3092X Vulnerability Types: - Reliance on Cookies without validation and integrity checks in security decisions - Improper privilege assignment for critical resources - Plaintext storage of passwords - Improper user management Mitigation Recommended Practices: - Follow the principle of least privilege - Do not click links or open attachments in unsolicited emails - Refer to information on identifying and avoiding email scams - Refer to information on avoiding social engineering and phishing attacks - Conduct appropriate impact analysis and risk assessment before deploying mitigations - Implement recommended cybersecurity strategies to proactively defend ICS assets - Follow internal procedures and report suspicious malicious activity to CISA Vulnerability Details CVE-2026-60134 CVE-2026-61892 CVE-2026-61886 CVE-2026-60135 Acknowledgments Vincenzo Giuseppe Colacino of Secore reported these vulnerabilities to CISA Revision History Initial Publication Date: July 23, 2026 Revision: 1 Summary: Initial release Vendor Weintek Tags Industry: Critical Manufacturing Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Related Advisories Panduit IntraVUE Johnson Controls C-CURE 9000 and Victor application server Rockwell Automation ThinManager MZ Automation lib60870 Feedback Share your thoughts: We have recently updated the anonymous product survey; feedback is welcome. Legal Notice and Terms of Use This product is subject to this notice and the privacy and terms of use policy. Contact Information CISA Central: 1-844-Say-CISA Email: contact@cisa.dhs.gov Social Media Facebook, X, LinkedIn, YouTube, Instagram, RSS Official Websites CISA.gov Department of Homeland Security official website Additional Links About CISA Budget and Performance OIG.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback Back to Top Back to top link Navigation Bar Topics Highlights Resources and Tools News and Events Careers About Footer Cybersecurity and Infrastructure Security Agency Department of Homeland Security official website Advertising None Summary This page provides detailed information on multiple security vulnerabilities in the Weintek cMT3092X device, including vulnerability overview, affected products, mitigation, vulnerability details, acknowledgments, revision history, vendor, tags, related advisories, feedback, legal notice and terms of use, contact information, social media, official websites, additional links, back to top, navigation bar, footer, and advertising.

Goal Reached Thanks to every supporter — we hit 100%!

CISA ICSA-26-204-03 Weintek cMT3092X ICS Vulnerability Advisory

More from this source