VulnSocial

CVE-2026-19412Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

This vulnerability exists in the CP Plus CP-XR-DE21-S Router due to the presence of hardcoded HTTP Digest authentication credentials in the firmware that are identical across all devices running the affected firmware. An attacker with access to the local network could exploit this vulnerability by obtaining the hardcoded authentication information from the firmware. Successful exploitation of this vulnerability could allow the attacker to gain unauthorized administrative access and perform privileged operations on the targeted device.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-798

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-29: 1Technical Details · 2026-08-29: 108-29
Signal classification1 categories
Disclosure
1100.0%
Full discourse1 post
  • ADK Cyber@ADKCyber
    Disclosure

    CP Plus CP-XR-DE21-S routers have hardcoded HTTP Digest credentials identical across all units (CVE-2026-19412, CVSS 8.7). Review devices and plan replacement if in use. via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability https://t.co/tLFbJj7124

    Post summary

    The tweet publicly discloses CVE‑2026‑19412, a high‑score vulnerability involving hardcoded HTTP Digest credentials across CP Plus routers, and urges users to review and replace affected devices.

    0000043
    95 followersView on X

Explore more

Back to dashboard