CVE-2026-22109

8.4 high

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.

Severity

CVSS 4.0

8.4 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:H/SA:L

CWE: CWE-1392
Published: 2026-10-30
Modified: 2026-10-30
Record from: the NVD, synced 2026-10-30

References

https://csirt.divd.nl/CVE-2026-22109
https://csirt.divd.nl/DIVD-2026-00012

Check your stack JSON