CVE-2026-1222highCWE-434

CVE-2026-1222: high-severity vulnerability in BROWAN COMMUNICATIONS PrismX MX100 AP controller

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Arbitrary File Upload

Published

Follow this CVE+ Monitor PrismX MX100 AP controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.6epss 0.7%
PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
BROWAN COMMUNICATIONS · PrismX MX100 AP controller
Related CVEs — BROWAN COMMUNICATIONS PrismX MX100 AP controller

In the same product, most dangerous first.

CVE-2026-1221CRITICALBROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Use of Hard-coded CredentialsEPSS 0.5%CVE-2026-1223MEDIUMBROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Insufficiently Protected CredentialsEPSS 0.4%