THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19901 (HIGH 8.1) — A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. Th

[NVD] CVE-2026-19901 (HIGH 8.1) — A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. Th

mednvdPublished 2026-08-15

CVE-2026-19901 CVSS: 8.1 HIGH Published: 2026-08-15T18:16:24.830

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-19901cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19901