CVE-2026-9141 is a critical authentication bypass vulnerability (CWE-306) affecting Taiko Network Communications AG1000-01A SMS Alert Gateway version 7.3. The embedded web configuration interface lacks proper session management and server-side authentication checks, allowing unauthenticated attackers with network access to directly request internal resources such as index.zhtml, point.zhtml, and log.shtml. This results in unauthorized administrative access with full read and write capabilities, enabling modification of alarm routing and device configurations, and disruption of monitoring and control operations.

Successful exploitation grants unauthenticated attackers full administrative access to the device's web interface. This can lead to unauthorized changes in alarm routing and device configuration, potentially causing disruption or failure of critical monitoring and control functions. The vulnerability impacts confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been provided at this time. Until a patch is available, restrict network access to the device's web interface to trusted administrators only and monitor for unauthorized access attempts.