Auth bypass in Taiko Network Communications Pte Ltd. Ag1000-01a Sms Alert Gateway
CVE-2026-9141
Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains an authentication bypass vulnerability in the embedded web configuration interface that allows unauthenticated attackers to access internal application pages without any session management or server-side authentication checks. Attackers with network access can directly request internal resources such as index.zhtml, point.zhtml, and log.shtml to gain full administrative read and write access, enabling unauthorized modification of alarm routing, device configuration, and disruption of monitoring and control functions.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.007 (51.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 52nd percentile — 51.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.007 · change: +0.002
Affected products
- Taiko Network Communications Pte Ltd. Ag1000-01a Sms Alert Gateway — versions Rev 7.3, Rev 8, UM-AG1000_R7.2
Weakness classification (CWE)
References
- Ledger Security Bulletin 019 (technical-description)
- www.vulncheck.com/advisories/taiko-ag1000-01a-rev-8-authentication-bypass-via-w… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-9141?
- CVE-2026-9141 is a critical-severity vulnerability in Taiko Network Communications Pte Ltd. Ag1000-01a Sms Alert Gateway, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2026-05-20.
- How severe is CVE-2026-9141?
- Critical severity. CVSS v3 base score is 9.8 out of 10.