PT-2026-5664 · Innomic · Avibia Avlx+1

Published 2026-02-02 · Updated 2026-02-02 · CVE-2022-50977

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Innomic VibroLine VLX and avibia AVLX (affected versions not specified)

Description An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via HTTP. The issue allows for a change in configuration presets without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-50977

Affected Products

Vibroline Vlx Hd

Avibia Avlx

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-50977 · Security Note
• https://innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json · Vendor Advisory
• https://innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html · Vendor Advisory
• https://t.me/CVEtracker/43498 · Telegram Post