CVE-2026-22910CWE-1391

The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access

High · published January 15, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

🚨 An alarming default password problem lurks in hidden user levels! If a potential intruder knows the default passwords, they could gain unauthorized access. 🔥 Think of it like a hotel room with hidden doors only accessible to staff, yet the keys are left under the doormat. Anyone with knowledge of these passwords can walk right in without even knocking! This vulnerability could lead to unauthorized users taking control of sensitive areas within the system. The consequences are dire - attackers could tamper with data, disrupt operations, or even lock out legitimate users entirely. That's an absolute recipe for chaos! ⚠️

Put simply

Think of it like a hotel room with hidden doors only accessible to staff, yet the keys are left under the doormat. Anyone with knowledge of these passwords can walk right in without even knocking! The vulnerability arises from certain hidden user levels on the device that are shipped with weak, publicly known default passwords, allowing easy unauthorized access if left unchanged.

What to do

This vulnerability could lead to unauthorized users taking control of sensitive areas within the system. The consequences are dire - attackers could tamper with data, disrupt operations, or even lock out legitimate users entirely. That's an absolute recipe for chaos! ⚠️ To mitigate this risk, change all default passwords immediately to strong, unique passwords. Additionally, implement a policy to regularly audit password security and educate users on the importance of password hygiene. Don't let those hidden doors stay unlocked! 🛡️ You've got this! Take these steps to secure your system and boost your security hero status! 💪✨

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Weakness
CWE-1391 · Use of Weak Credentials
Published
2026-01-15T13:02Z
EPSS history
Timeline
  • 15 JAN 13:02Z
    The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access
    cvelistv5