CVE-2026-22192CWE-306

Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage

High · published March 13, 2026

CVSS v4.0
8.8
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access controls and gain unauthorized access to protected management functionality without valid credentials.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00280 · 19.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-03-13T01:18Z
EPSS history
Timeline
  • 13 MAR 01:18Z
    Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage
    cvelistv5