CVE-2026-22109
CVE-2026-22109
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Weakness classification (CWE)
References
- csirt.divd.nl/DIVD-2026-00012 (third-party-advisory)
- csirt.divd.nl/CVE-2026-22109 (third-party-advisory)