Auth bypass in Avation Light Engine Pro

CVE-2026-1341

Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control.

Vulnerability class: Broken Authentication

EPSS: 0.005 (39.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References