VULNERABILITY INTELLIGENCE

CVE-2026-22114

EPSS probability0.18%
CISA KEVNot currently listed
Published2026-10-30
Last modified2026-10-30

Description

HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.

Weakness classification

  • csirt@divd.nl: CWE-307

Primary references