CVE-2026-21660 - Vulnerability Analysis

Overview

Frick Controls Quantum HD <= 10.22 contains a plaintext password storage vulnerability caused by hardcoded email credentials in firmware, letting attackers gain unauthorized access and expose sensitive information, exploit requires firmware access.

Severity & Score

Impact

Attackers can gain unauthorized access and expose sensitive information, potentially leading to system compromise.

Mitigation

Update to a version later than 10.22 or the latest available version.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01
• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 2, 2026

🔴 CVE-2026-21660 - Critical (9.8) Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-21660/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner