SNMP Web Pro vulnerabilities

2 known vulnerabilities in SNMP Web Pro from Voltronic Power. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SNMP Web Pro: Unrestricted Upload of File with Dangerous Type

  CVE-2026-44402Sep 4, 2026Voltronic PowerEPSS 1.32%

  Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid cred

• 7.5 High severity

  SNMP Web Pro: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-22199Mar 13, 2026Voltronic PowerEPSS 1.1%

  Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to read arbitrary files on the device filesystem by supplying directory traversal sequences in