CVE-2026-22114
CVE-2026-22114
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Weakness classification (CWE)
References
- csirt.divd.nl/DIVD-2026-00012 (third-party-advisory)
- csirt.divd.nl/CVE-2026-22114 (third-party-advisory)