CVE-2026-22109
Received Received - Intake

Default Passwords in WebUI Template Database

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: Dutch Institute for Vulnerability Disclosure

Description
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-22109
EUVD
EUVD-2026-113763

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Delta Electronics Delta UFC500 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1392 The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves the WebUI template database on certain devices retaining factory default passwords for all account types in cleartext. These default passwords are identical across devices and were not changed on the tested unit, making unauthorized access easier for attackers.

Impact Analysis

An attacker could exploit this to gain unauthorized access to the device through the WebUI, potentially leading to data theft, device manipulation, or further network compromise. The cleartext passwords make exploitation straightforward.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and access control, such as GDPR (data security) and HIPAA (protected health information safeguards), due to the exposure of default credentials and potential unauthorized access.

Mitigation Strategies

Change all default passwords for the five account types in the WebUI template database to strong, unique passwords. Ensure no devices retain factory defaults.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-22109. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart