CVE-2026-22192 describes an authentication bypass vulnerability in Voltronic Power SNMP Web Pro version 1.1. The issue arises because the application relies on client-side localStorage values to enforce authentication state, which can be manipulated by attackers. This allows unauthenticated users to gain unauthorized access to critical management functions by bypassing server-side access controls. The vulnerability is categorized under CWE-306, indicating missing authentication for critical functions. The CVSS 4.0 base score is 8.8, reflecting a high-impact remote network attack with no required privileges or user interaction.

An attacker can gain unauthorized access to privileged management functionality without valid credentials by exploiting this vulnerability. This could lead to unauthorized configuration changes, management operations, or other critical actions within the affected system. The vulnerability affects the confidentiality and integrity of the system's management interface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SNMP Web Pro interface to trusted networks and users only. Monitor for updates from Voltronic Power regarding patches or mitigations. Avoid relying on client-side authentication state for security.