CVE-2026-1223: PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers…

PriorityP429medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.36%

28.2th percentile

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
browan_communications	prismx_mx100_ap_controller	< 1.03.23.01	1.03.23.01

CVSS provenance

nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

nvdv4.06.9MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET WEB_SPECIFIC_APPS UTT formFireWall GroupName Parameter Buffer Overflow Attempt (CVE-2026-0837)

suricata·2026-01-12·CVSS 7.4

CVE-2026-0837 [HIGH] ET WEB_SPECIFIC_APPS UTT formFireWall GroupName Parameter Buffer Overflow Attempt (CVE-2026-0837) ET WEB_SPECIFIC_APPS UTT formFireWall GroupName Parameter Buffer Overflow Attempt (CVE-2026-0837) Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS UTT formFireWall GroupName Parameter Buffer Overflow Attempt (CVE-2026-0837)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:20; content:"/goform/formFireWall"; fast_pattern; http.request_body; content:"GroupName|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:url,github.com/Lena-lyy/cve/blob/main/1223/27.md; reference:cve,2026-0837; classtype:web-application-attack; sid:2066681; rev:1; metadata:affected_product UTT, attack_target Networking_Equipment, tls_state plaintext, created_at 2026_01_12, cve CVE_2026_0837, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, sig

Suricata

ET WEB_SPECIFIC_APPS UTT ConfigWirelessBase ssid Parameter Buffer Overflow Attempt (CVE-2026-0838)

suricata·2026-01-12·CVSS 7.4

CVE-2026-0838 [HIGH] ET WEB_SPECIFIC_APPS UTT ConfigWirelessBase ssid Parameter Buffer Overflow Attempt (CVE-2026-0838) ET WEB_SPECIFIC_APPS UTT ConfigWirelessBase ssid Parameter Buffer Overflow Attempt (CVE-2026-0838) Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS UTT ConfigWirelessBase ssid Parameter Buffer Overflow Attempt (CVE-2026-0838)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:26; content:"/goform/ConfigWirelessBase"; fast_pattern; http.request_body; content:"ssid|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:url,github.com/Lena-lyy/cve/blob/main/1223/28.md; reference:cve,2026-0838; classtype:web-application-attack; sid:2066680; rev:1; metadata:affected_product UTT, attack_target Networking_Equipment, tls_state plaintext, created_at 2026_01_12, cve CVE_2026_0838, deployment Perimeter, deployment Internal, performance_impact Low, confidence High,

Suricata

ET WEB_SPECIFIC_APPS UTT formRemoteControl Profile Parameter Buffer Overflow Attempt

suricata·2026-01-12

ET WEB_SPECIFIC_APPS UTT formRemoteControl Profile Parameter Buffer Overflow Attempt ET WEB_SPECIFIC_APPS UTT formRemoteControl Profile Parameter Buffer Overflow Attempt Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS UTT formRemoteControl Profile Parameter Buffer Overflow Attempt"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:25; content:"/goform/formRemoteControl"; fast_pattern; http.request_body; content:"Profile|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:url,github.com/Lena-lyy/cve/blob/main/1223/18.md; classtype:web-application-attack; sid:2066682; rev:1; metadata:affected_product UTT, attack_target Networking_Equipment, tls_state plaintext, created_at 2026_01_12, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Major, tag Exploit, tag Description_Generated_By_Pr

Suricata

ET WEB_SPECIFIC_APPS UTT formConfigCliForEngineerOnly addCommand Parameter Buffer Overflow Attempt

suricata·2026-01-12

ET WEB_SPECIFIC_APPS UTT formConfigCliForEngineerOnly addCommand Parameter Buffer Overflow Attempt ET WEB_SPECIFIC_APPS UTT formConfigCliForEngineerOnly addCommand Parameter Buffer Overflow Attempt Rule: alert http any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS UTT formConfigCliForEngineerOnly addCommand Parameter Buffer Overflow Attempt"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:36; content:"/goform/formConfigCliForEngineerOnly"; fast_pattern; http.request_body; content:"addCommand|3d|"; pcre:"/^[^&]{100,}(?:&|$)/R"; reference:url,github.com/Lena-lyy/cve/blob/main/1223/19.md; classtype:web-application-attack; sid:2066683; rev:1; metadata:affected_product UTT, attack_target Networking_Equipment, tls_state plaintext, created_at 2026_01_12, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Major, ta