CVE-2026-22900CRITICAL 9.8EPSS p24.5%

CVE-2026-22900CVE-2026-22900

Description

A use of hard-coded credentials vulnerability has been reported to affect QuNetSwitch. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: QuNetSwitch 2.0.5.0906 and later

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.32% probability of exploitation · percentile 24.5% · 2026-08-03T12:00:16Z
Published2026-03-20
Last modified2026-03-25

Underlying weaknesses· 1

CWE-798

References

  1. https://www.qnap.com/en/security-advisory/qsa-26-11

1

TypeTargetConfidenceTier
WeaknessUse of Hard-coded Credentialscwe-7980%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-22901
CVE
CVE-2026-22897
CVE
CVE-2026-41038
CVE
CVE-2026-41036
CVE
CVE-2025-62777
CVE
CVE-2026-21660
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.