CVE-2026-28745

11th percentile - higher than 11% of all known CVEs

Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, they could obtain other credentials on the system.

An attacker who knows the default credentials can decrypt or obtain other login credentials, leading to privilege escalation. This is a serious system security threat.

Change default credentials and use strong encryption for authentication data in the configuration file. Update software to a version that fixes the vulnerability.