Is CVE-2026-60135 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-60135 being exploited in the wild.

How severe is CVE-2026-60135?

Medium severity, with a CVSS score of 6.5, published 24 July 2026.

Which products and versions are affected?

Weintek cMT3092X firmware <20210218; Weintek EasyWeb <v2.1.20.

Is there a fix for CVE-2026-60135?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-60135 attacked?

It is attacked over the network.

Am I affected by CVE-2026-60135?

Check whether you run Weintek cMT3092X firmware or Weintek EasyWeb at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-60135: Weintek cMT3092X Incorrect User Management in EasyWeb

Q: Is there a fix for CVE-2026-60135?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-60135 attacked?

It is attacked over the network.

Q: Am I affected by CVE-2026-60135?

Check whether you run Weintek cMT3092X firmware or Weintek EasyWeb at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-60135 · Severity: medium · CVSS 6.5 · Published 2026-07-24

A vulnerability in Weintek cMT3092X industrial human-machine interface (HMI) devices allows an attacker to modify data that should be restricted to read-only access. These devices are commonly used in manufacturing environments to monitor and control industrial processes. If exploited, an unauthorized user could change critical operational settings or data, potentially leading to process disruptions or safety risks.

Technologies: Weintek cMT3092X firmware, Weintek EasyWeb. Vendors: Weintek.

Quick answers

Is CVE-2026-60135 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-60135 being exploited in the wild.
How severe is CVE-2026-60135?: Medium severity, with a CVSS score of 6.5, published 24 July 2026.
Which products and versions are affected?: Weintek cMT3092X firmware <20210218; Weintek EasyWeb <v2.1.20.
Is there a fix for CVE-2026-60135?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-60135 attacked?: It is attacked over the network.
Am I affected by CVE-2026-60135?: Check whether you run Weintek cMT3092X firmware or Weintek EasyWeb at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is classified as CWE-286 (Incorrect User Management) within the EasyWeb component of Weintek cMT3092X HMI devices. An attacker with low-privileged network access can bypass intended access controls to modify data fields that are explicitly marked as read-only. This occurs due to insufficient validation of user permissions when processing data modification requests. Successful exploitation allows for unauthorized integrity changes to the device configuration or operational data. A patch (cmt_typeB_20260316_007.patch) is available from the vendor which updates EasyWeb to version 2.3.17-typeb.

Affected products

Weintek cMT3092X firmware <20210218
Weintek EasyWeb <v2.1.20

Timeline

2026-07-23: advisory: CISA published advisory ICSA-26-204-03
2026-07-24: disclosed: CVE-2026-60135 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.