PT-2026-133436

CVE-2026-22109

·

Published

2026-10-30

·

Updated

2026-10-30

Description by

CVSS 4.0
8.4
High
MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-1392: Use of Default Credentials
Related identifiers
CVE-2026-22109
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com