Vulnerability · Published Mar 13, 2026 · Assigned by VulnCheck

CVE-2026-22192Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage

Critical 9.9

In plain English

A critical-severity missing authentication in SNMP Web Pro from Voltronic Power. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)0.3%top 78.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management functions by manipulating browser localStorage values. Attackers can modify client-side authentication state to bypass server-side access controls and gain unauthorized access to protected management functionality without valid credentials.

Affected products (as reported)

Vendor	Product	Versions
Voltronic Power	SNMP Web Pro	1.1

Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

References

https://github.com/kmkz/Exploits/blob/master/2026/CVE-2026-22192-22199_Voltronic-Power_Preauth_root_RCE.txt technical-description
https://www.boffsec-services.com/posts/sicuroweb-cve-2026-22191/ technical-description
https://voltronicpower.com/ product
https://www.vulncheck.com/advisories/voltronic-power-snmp-web-pro-authentication-bypass-via-localstorage third-party-advisory