CVE-2026-14354CWE-522

CVE-2026-14354

published July 29, 2026

CVSS
8.7
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored credentials within the application.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-07-29T17:17Z
References (1)
EPSS history
Timeline
  • 29 JUL 11:54Z
    CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially…
    cvelistv5