CVE-2026-22312 — Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart Collector

CVE-2026-22312

Use of Hard-coded Credentials Vulnerability in Radiflow iSAP Smart Collector PUBLISHED

Description (CNA)

The device has a webserver that exposes a REST API authenticated with a constant token. The unauthenticated API can be used by an attacker to get access to system settings, modify the configuration and execute some commands (e.g. system reboot).

Affected (CNA)

Vendor / product	Versions
Radiflow / iSAP Smart Collector	affected 3.07-1

CWE

CWE-798

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2026-22312

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.