VULNERABILITY INTELLIGENCE
CVE-2026-22114
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-10-30
Last modified2026-10-30
Description
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.
Weakness classification
- csirt@divd.nl: CWE-307