CVE-2026-22900CWE-798
QuNetSwitch
Medium · published March 20, 2026
What it is
A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access.
We have already fixed the vulnerability in the following version:
QuNetSwitch 2.0.5.0906 and later
The record
Technical detail
- CVSS v4.0
- 6.8 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U
- EPSS
- 0.00332 · 25.2th percentile
- Weakness
- CWE-798 · Use of Hard-coded Credentials
- Published
- 2026-03-20T16:21Z
EPSS history
Timeline
20 MAR 16:21Z
QuNetSwitch
cvelistv5