CVE-2026-22192
Critical
Description
Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access controls and gain unauthorized access to protected management functionality without valid credentials.
SeverityCritical
CVSS9.9
Exploit probability—
ProductGvectors Wpdiscuz
PublishedMar 13, 2026
First seenMar 13, 2026
Weakness typeCWE-306Missing authentication for critical function
How to fix
Update
- gvectors wpdiscuz7.6.47 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gvectors wpdiscuz | v < 7.6.47 | 7.6.47 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.