Is CVE-2026-61886 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-61886 being exploited in the wild.

How severe is CVE-2026-61886?

Medium severity, with a CVSS score of 6.5, published 24 July 2026.

Which products and versions are affected?

Weintek cMT3092X firmware < 20210218; Weintek EasyWeb < v2.1.20.

Is there a fix for CVE-2026-61886?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-61886 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-61886?

Check whether you run Weintek cMT3092X firmware or Weintek EasyWeb at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-61886: Weintek cMT3092X plaintext password storage in EasyWeb

Q: Is there a fix for CVE-2026-61886?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-61886 attacked?

It is attacked over the network, in an operating system.

Q: Am I affected by CVE-2026-61886?

Check whether you run Weintek cMT3092X firmware or Weintek EasyWeb at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-61886 · Severity: medium · CVSS 6.5 · Published 2026-07-24

Weintek cMT3092X Human Machine Interface (HMI) devices, which are used to control industrial machinery, contain a security flaw where user passwords are stored without encryption. This allows an individual with basic network access to the device to view the login credentials of other users. If exploited, an attacker could gain unauthorized access to the control system, potentially leading to unauthorized changes in industrial operations or data theft.

Technologies: Weintek cMT3092X firmware, Weintek EasyWeb. Vendors: Weintek.

Quick answers

Is CVE-2026-61886 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-61886 being exploited in the wild.
How severe is CVE-2026-61886?: Medium severity, with a CVSS score of 6.5, published 24 July 2026.
Which products and versions are affected?: Weintek cMT3092X firmware < 20210218; Weintek EasyWeb < v2.1.20.
Is there a fix for CVE-2026-61886?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-61886 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-61886?: Check whether you run Weintek cMT3092X firmware or Weintek EasyWeb at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A plaintext storage of passwords vulnerability (CWE-256) exists in Weintek cMT3092X HMI firmware and the EasyWeb component. The vulnerability allows a non-privileged user with network access to the device to retrieve and view the credentials of other registered users because the system fails to use cryptographic hashing or encryption for stored passwords. This issue is part of a broader set of vulnerabilities (including privilege escalation via cookie/token manipulation) affecting these industrial control assets. A patch (cmt_typeB_20260316_007.patch) containing EasyWeb v2.3.17-typeb has been released to address the issue.

Affected products

Weintek cMT3092X firmware < 20210218
Weintek EasyWeb < v2.1.20

Timeline

2026-07-23: advisory: CISA published advisory ICSA-26-204-03
2026-07-24: disclosed: CVE-2026-61886 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.