CVE-2026-1341CWE-306

Missing Authentication for Critical Function in Avation Light Engine Pro

Critical · published February 3, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00561 · 45.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-03T21:26Z
EPSS history
Timeline
  • 03 FEB 21:26Z
    Missing Authentication for Critical Function in Avation Light Engine Pro
    cvelistv5