CVE-2026-22192: Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage
Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access controls and gain unauthorized access to protected management functionality without valid credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22192?
CVE-2026-22192 is classified as a high severity stored cross-site scripting vulnerability.
How do I fix CVE-2026-22192?
The only way to fix CVE-2026-22192 is to update wpDiscuz to version 7.6.47 or later.
Who is affected by CVE-2026-22192?
CVE-2026-22192 affects all versions of wpDiscuz prior to 7.6.47.
What can attackers do with CVE-2026-22192?
Attackers can exploit CVE-2026-22192 to inject malicious JavaScript into the wpDiscuz plugin via imported options files.
How can I determine if my site is vulnerable to CVE-2026-22192?
You can check if your site is running a version of wpDiscuz older than 7.6.47 to determine vulnerability to CVE-2026-22192.