Search/CVE-2026-22109
● CVE

CVE-2026-22109

DiscoveredOct 30, 2026UpdatedOct 30, 2026

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.

CVSS v3.1
—
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Oct 30, 2026
Disclosure — published as a CVE record.