PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to l…

CVE-2026-1221 affects the PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS. The vulnerability involves the use of hard-coded credentials stored in the firmware. This allows unauthenticated remote attackers to log in to the database without proper authentication. The vulnerability poses a significant security risk as it provides unauthorized database access. Attackers can exploit this remotely without any authentication requirements. The hard-coded credentials are embedded in the device firmware, making them accessible to attackers who analyze the firmware. This type of vulnerability is particularly serious for network infrastructure devices.