CVE-2026-1221CWE-798

BROWAN COMMUNICATIONS |PrismX MX100 AP controller - Use of Hard-coded Credentials

Critical · published January 20, 2026

CVSS v4.0
9.3
EPSS
1%
Percentile
42.6
In the wild
Unconfirmed
What it is

🔥 Hard-coded credentials in firmware? That's a huge red flag! With this vulnerability in the PrismX MX100 AP controller, an attacker can log in as easily as typing a password that was printed on a sticky note. 🚨 Think of this like a restaurant that leaves its back door wide open with a big sign that says, 'Come on in! We're not checking IDs!' Anyone could walk in and take whatever they want without a second thought. An unauthenticated attacker could gain access to critical database information, potentially leading to data theft, unauthorized changes, or even complete system control. The consequences could be absolutely devastating, exposing sensitive data and risking the integrity of the entire network.

Put simply

Think of this like a restaurant that leaves its back door wide open with a big sign that says, 'Come on in! We're not checking IDs!' Anyone could walk in and take whatever they want without a second thought. This vulnerability arises from hard-coded database credentials within the PrismX MX100 AP controller's firmware, allowing anyone who knows where to look to log in remotely without any authentication barriers.

What to do

An unauthenticated attacker could gain access to critical database information, potentially leading to data theft, unauthorized changes, or even complete system control. The consequences could be absolutely devastating, exposing sensitive data and risking the integrity of the entire network. To mitigate this risk, immediately update the firmware to the latest version where this vulnerability is fixed. Also, consider auditing your security practices to ensure that hard-coded credentials are not used anywhere else. You've got this! By taking these actions, you’ll help secure your system against unauthorized access. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00508 · 42.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-01-20T06:25Z
EPSS history
Timeline
  • 20 JAN 06:25Z
    BROWAN COMMUNICATIONS |PrismX MX100 AP controller - Use of Hard-coded Credentials
    cvelistv5