WebUI vulnerabilities

CVEs whose affected-version data names the WebUI package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-22109High· 8.4

1w ago

Default WebUI passwords stored in plaintext

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.

▾ TwilightDelta Electronics · msi-imageEPSS 0.15%via CVEORG