Browan Communications Prismx Mx100 Ap Controller vulnerabilities

CVE-2026-1221 [CRITICAL] CWE-798 CVE-2026-1221: PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials v PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware.

CVE-2026-1222 [HIGH] CWE-434 CVE-2026-1222: PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerabi PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVE-2026-1223 [MEDIUM] CWE-522 CVE-2026-1223: PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Creden PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.