BROWAN COMMUNICATIONS vulnerabilities

🔔 Create alert RSS

Published CVEs affecting BROWAN COMMUNICATIONS products: 3 record(s), with severity, exploitation and fixes.

PrismX MX100 AP controller 3

Exploited only (KEV) →

CVE-2026-1223 Medium · 4.9 CWE-522 Jan 20, 2026

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Insufficiently Protected Credentials

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to allowing authenticated remote attackers to obtain SMTP plaintext passwords through the web frontend.

CVE-2026-1222 High · 7.2 CWE-434 Jan 20, 2026

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Arbitrary File Upload

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

CVE-2026-1221 Critical · 9.8 CWE-798 Jan 20, 2026

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Use of Hard-coded Credentials

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware.