CVE-2026-14354

Awaiting Analysis Awaiting Analysis - Queue

Insufficiently Protected Credentials in Application

Publication date: 2026-07-29

Last updated on: 2026-07-29

Assigner: Schneider Electric SE

Description

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored credentials within the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-29

Last Modified

2026-07-29

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-14354

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

This vulnerability is a CWE-522 Insufficiently Protected Credentials issue. It allows a local privileged attacker to bypass authentication and modify credentials by exploiting weaknesses in how stored credentials are handled and protected within the application. This could lead to unauthorized access and control of managed devices.

Impact Analysis

If exploited, this vulnerability could allow an attacker to bypass authentication, modify credentials, and gain unauthorized access to managed devices. This may result in data breaches, loss of sensitive information, or full system compromise depending on the attacker's goals.

Compliance Impact

This vulnerability could lead to unauthorized access and modification of credentials, potentially exposing sensitive data. This may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information, depending on the data involved.

Mitigation Strategies

Implement strong access controls and restrict local privileged access to sensitive credential storage areas. Review and harden credential storage mechanisms to ensure proper protection against unauthorized modification or bypass.

Hi! I’m here to help you understand CVE-2026-14354. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70