CVE-2022-50977
High
Description
An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP.
SeverityHigh
CVSS7.5
Exploit probability—
ProductVibroLine VLX1 HD 5.0
PublishedFeb 2, 2026
First seenFeb 2, 2026
Weakness typeCWE-306Missing authentication for critical function
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Innomic VibroLine VLX1 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| Innomic VibroLine VLX2 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| Innomic VibroLine VLX4 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| Innomic VibroLine VLX6 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| Innomic VibroLine VLX8 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| avibia AvibiaLine AVLX1 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| avibia AvibiaLine AVLX2 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| avibia AvibiaLine AVLX4 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| avibia AvibiaLine AVLX6 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
| avibia AvibiaLine AVLX8 HD 5.0 | 2.1.1340 ≤ v ≤ 2.1.1387, 2.1.1866 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.