1. Home
  2. CVE Database
  3. CVE-2026-22054
HIGH · 8.8

CVE-2026-22054

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.

Vulnerability Description

Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetappActive Iq Config Advisor6.7.3

Related Weaknesses (CWE)

CWE-259

References

FAQ

What is CVE-2026-22054?

CVE-2026-22054 is a vulnerability with a CVSS score of 8.8 (HIGH). Active IQ Config Advisor version 6.7.3 contains hard-coded credentials that could allow an authenticated attacker with low privileges to perform unauthorized AutoSupport operations.

How severe is CVE-2026-22054?

CVE-2026-22054 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-22054?

Check the references section above for vendor advisories and patch information. Affected products include: Netapp Active Iq Config Advisor.