ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-9141

Taiko AG1000-01A Rev 7.3/8 Authentication Bypass via Web Interface

CVSS 3.1 9.8 CRITICALCVSS 4.0 9.3 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-9141

Published

Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows unauthenticated attackers to access internal application pages without any session management or server-side authentication checks. Attackers with network access can directly request internal resources such as index.zhtml, point.zhtml, and log.shtml to gain full administrative read and write access, enabling unauthorized modification of alarm routing, device configuration, and disruption of monitoring and control functions.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-9141

Published

AG1000-01A SMS Alert Gateway

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Taiko Network Communications Pte Ltd.",
                    "product": "AG1000-01A SMS Alert Gateway",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "Rev 7.3",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "Rev 8",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "UM-AG1000_R7.2",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON