CVE-2026-22054

Analyzed Analyzed - Analysis Complete

Hard-Coded Credentials in Active IQ Config Advisor

Publication date: 2026-06-03

Last updated on: 2026-06-30

Assigner: NetApp, Inc.

Description

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-03

Last Modified

2026-06-30

Generated

2026-07-14

AI Q&A

2026-06-04

EPSS Evaluated

2026-07-12

NVD

CVE-2026-22054

EUVD

EUVD-2026-34183

Affected Vendors & Products

Vendor	Product	Version / Range
netapp	active_iq_config_advisor	6.7.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-259	The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Active IQ Config Advisor version 6.7.3, where hard-coded credentials are present in the software.

An authenticated attacker with low privileges could exploit these hard-coded credentials to perform unauthorized AutoSupport operations.

Impact Analysis

The vulnerability allows an attacker with low privileges to use hard-coded credentials to carry out unauthorized AutoSupport operations.

This could lead to unauthorized actions within the system, potentially compromising system integrity or exposing sensitive operational data.

Hi! I’m here to help you understand CVE-2026-22054. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70