CVE-2026-14354:详情

CVE-2026-14354

2026-07-29
13h17 +00:00
A04-Insecure Design
2026-10-23
23h10 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored credentials within the application.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

参考资料