PT-2026-5665 · Innomic · Avibia Avlx+1

Published 2026-02-02 · Updated 2026-02-02 · CVE-2022-50978

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Innomic VibroLine VLX and avibia AVLX (affected versions not specified)

Description An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP). The issue involves the ability to change configuration presets without authentication, potentially impacting operational stability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-50978

Affected Products

Vibroline Vlx Hd

Avibia Avlx

References · 4

• https://innomic.com/.well-known/csaf/white/2026/ids-2026-0001.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50978 · Security Note
• https://innomic.com/.well-known/csaf/white/2026/ids-2026-0001.html · Vendor Advisory
• https://t.me/CVEtracker/43499 · Telegram Post