Insufficient Authorization on Administrative Password Change Function

CVE-2026-80275 affects Comelit Multi-User Gateway for VIP System model 1456B running firmware versions 2.9.1 and 2.10.0, exposing a critical authorization bypass in the administrative password-change function. The vulnerability allows any authenticated user—regardless of privilege level—to invoke a function intended only for installers/administrators, enabling them to overwrite the installer account password and gain full system control. This is particularly dangerous in access control and building security systems where the VIP Gateway serves as a central authentication hub. Organizations deploying affected Comelit equipment face immediate risk of unauthorized administrative access, system compromise, and potential physical security breaches across connected entry points.

While this CVE currently shows zero matching Casky skills due to its specificity to Comelit firmware, practitioners using Casky.ai would detect the underlying attack pattern through the platform's authorization and privilege escalation detection capabilities. The vulnerability represents a classic broken access control issue (CWE-425) that Claude AI with extended reasoning can correlate across MITRE ATT&CK techniques including T1548 (Abuse Elevation Control Mechanism), T1078 (Valid Accounts), and T1556 (Modify Authentication Process). When analyzing Comelit VIP Gateway traffic or configuration changes, Casky would flag suspicious password-change requests originating from non-administrative accounts, anomalous credential modification patterns, and unauthorized privilege escalation attempts—surfacing the malicious intent before attackers achieve persistent administrative access to your security infrastructure.