CVE-2026-60135

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-07-24

Last updated on: 2026-07-30

Assigner: ICS-CERT

Description

An attacker can modify data that should be restricted to read‑only access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-07-30

Generated

2026-10-13

AI Q&A

2026-07-25

EPSS Evaluated

2026-10-12

NVD

CVE-2026-60135

EUVD

EUVD-2026-48747

Affected Vendors & Products

Vendor	Product	Version / Range
Weintek	cMT3092X	firmware 0
Weintek	EasyWeb	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-286	The product does not properly manage a user within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability allows an attacker to modify data that should only be accessible in read-only mode. This means unauthorized changes can be made to restricted information without proper permissions.

Detection Guidance

This vulnerability involves unauthorized modification of read-only data. Detection requires monitoring for unexpected changes to critical files or configurations. Check file integrity with tools like AIDE or Tripwire, and review system logs for unusual write operations to protected directories. No specific commands are provided in the available context.

Impact Analysis

An attacker could alter critical data, leading to incorrect decisions, data corruption, or unauthorized actions. This could affect system integrity and trust in the data.

Compliance Impact

This vulnerability could violate compliance requirements that mandate data integrity and protection, such as GDPR's accuracy principle or HIPAA's integrity safeguards, potentially leading to legal and regulatory penalties.

Mitigation Strategies

Implement strict access controls to prevent unauthorized modifications. Review and restrict user permissions to read-only where possible. Monitor system logs for unusual write attempts or data changes.

Hi! I’m here to help you understand CVE-2026-60135. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70