CVE-2022-26834: Rakuten Casa

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default.

Affected products

• Rakuten Casa: version ap_f_v1_4_1 only; version ap_f_v2_0_0 only

Published 2022-06-13. Last modified 2026-06-17.