CVE-2026-22114

CVSS 5.3 (medium) · published 2026-10-30

HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.

Weakness: CWE-307

Source: NVD CVE-2026-22114

References

• https://csirt.divd.nl/CVE-2026-22114
• https://csirt.divd.nl/DIVD-2026-00012

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.