Security Advisory
CVE-2026-22906
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass.