CVE Catalog

CVE-2026-21660

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.23%

14th percentile - higher than 14% of all known CVEs

Summary

A vulnerability in Frick Controls Quantum HD version 10.22 and prior involves hardcoded email credentials saved as plaintext in firmware (CWE-256). This can lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise.

Risk Assessment

An attacker can gain access to email credentials, potentially leading to data confidentiality breaches, email account takeover, and system compromise.

Recommendation

Update firmware to a patched version. Change all email credentials and implement encryption mechanisms for sensitive data.

Original NVD description (English source)

A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS