Beveiligingsadvies
CVE-2026-22906
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.