CVE-2026-1221: Browan Communications Prismx MX100 Ap Controller

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

PrismX MX100 AP controller developed by BROWAN COMMUNICATIONS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to the database using hardcoded database credentials stored in the firmware.

Affected products

• Browan Communications Prismx MX100 Ap Controller: before 1.03.23.01 (fixed in 1.03.23.01)

Published 2026-01-20. Last modified 2026-06-17.