PatchSiren

Avation CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Avation CVE published 2026-02-03

CVE-2026-1341

CVE-2026-1341 is a critical weakness in Avation Light Engine Pro where the configuration and control interface is exposed without authentication or access control. CISA published the advisory on 2026-02-03 and assigned a CVSS v3.1 score of 9.8, reflecting the potential for remote, high-impact compromise of confidentiality, integrity, and availability.