Auth bypass in Avation Light Engine Pro
CVE-2026-1341
Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control.
Vulnerability class: Broken Authentication
EPSS: 0.005 (39.6th percentile) — read the EPSS interpretation.
Affected products
- Avation Light Engine Pro — versions All