CVE-2026-1222 — BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Arbitrary File Upload

CVE-2026-1222

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Arbitrary File Upload PUBLISHED

Description (CNA)

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

Affected (CNA)

Vendor / product	Versions
BROWAN COMMUNICATIONS / PrismX MX100 AP controller	affected 0 before 1.03.23.01

CWE

CWE-434

References

https://www.twcert.org.tw/tw/cp-132-10642-3b808-1.html
https://www.twcert.org.tw/en/cp-139-10643-2f8d7-2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.