CVE-2026-1341 CRITICAL

CVE-2026-1341: Missing Authentication for Critical Function in Avation Light Engine Pro

Vendor Avation
Product Avation Light Engine Pro
Weakness CWE-306 · Missing auth
Published February 3, 2026
Last update June 4, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Avation Light Engine Pro exposes its configuration and control interface without any authentication or access control.

Key dates

02Disclosure timeline

February 3, 2026 CVE published
June 4, 2026 Record updated