CVE-2026-26049
The web management interface of the device renders the passwords in a
plaintext input field. The current password is directly visible to
anyone with access to the UI, potentially exposing administrator
credentials to unauthorized observation via shoulder surfing,
screenshots, or browser form caching.
plaintext input field. The current password is directly visible to
anyone with access to the UI, potentially exposing administrator
credentials to unauthorized observation via shoulder surfing,
screenshots, or browser form caching.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-02-20 17:25:53
Güncelleme
2026-02-20 18:57:15
Source Identifier
ics-cert@hq.dhs.gov
KEV Date Added
-